When I'm in a chat room or community, it's the most common question for beginners, and I also remember shoveling this and that until I knew the platform called Dream Hack, so I wrote.
In fact, to get into security, you need to take programming knowledge and basic computer science knowledge to the base.
I would say to anyone who wants to get in, at least C, Python should learn and get in.
There are five main types of hacking. I think it's web hacking, reversing, fornable, forensics, and cryptography (crypto). Among them, I think the three most popular fields are web hacking, reversing, and fornable. In fact, it seems that a lot of beginners are interested in web hacking. Now, let's introduce how to study these three areas.
First of all, it's web hacking. Web hacking has a lower entry barrier than Riversing and Fournables. It's just that the entry barrier is low, not that the field itself is easy. For those who don't have any bases, I recommend you to first learn five languages in life coding: html, css, js, php, and mysql, then create a simple bulletin board site with login, membership registration, and writing functions, and then start web hacking. Web hacking is an area where development knowledge is proportional to skills. Therefore, I recommend you to create a lot of websites.
If you have a web development base
Learn basic web hacking techniques at DreamHack (
https://dreamhack.io ) and solve wargame problems using the techniques from the lecture. DreamHack is a security education platform created by Tiori that recently emerged. In addition to web hacking, it has a curriculum of reversing, fornable, and cryptography, and there are many high-quality wargame problems, and CTF is also held, so it is highly recommended not only for beginners but also for middle and senior citizens.
If you've got some foundation with
https://webhacking.kr DreamHack, I recommend you to solve the Webkeal War Game. In addition to popular techniques such as sql injection, you can also find a variety of techniques. If you've solved most of these war games, you'll get a sense of how to study web hacking in the future.
It is a war game where you can practice various forms of LOS (
https://los.rubiya.kr/) SQL Injection). The disadvantage is that it only deals with SQL Injection, but you can develop the creativity and thinking skills you need when hacking.
Web Hacking & Security Perfect Guide (
https://yes24.com/Product/Goods/14275829) This book is famous for web hacking. My acquaintance, whose main field is web hacking, was also impressed by this book. I recommend you to read it.
Next up is Fornable. Fornable is a field I've been web-hacking a little bit and turned my eyes around and am currently studying as my main focus.
In order to enter Fornable, you need to have C language utilization ability, a little assembly interpretation ability, and a little liberalization knowledge to proceed smoothly. Python is semi-essential. Even if you don't study Python properly, as long as you can use a module called pwntools, there is no problem with studying Fornables. I also don't study Python properly, scattering basic if sentences and for-door indentation, and looking for the necessary functions on the spot. For those who don't have the aforementioned base knowledge, I don't recommend introducing Fornable.
If you know the basics
DreamHack (
https://dreamhack.io ) is also recommended. I would like to say that DreamHack is the best site to start hacking. There are many different fields, but it seems to be focused on Fornables. The curriculum is also detailed and well-organized compared to other fields, and the war games are also more important than Fornables. There are also as many web hacking problems as Fornables.
Lazenka (
https://lazenca.net ) is a very good site. If you look to the left, you can see the menu, and if you open the TechNode tab, you'll see the lecture. Many techniques that are not from the Dream Nucleus curriculum are introduced and even translated into Korean.
HackCTF (
https://ctf.j0n9hyun.xyz/) has so many problems. It's a Korean Wargame site. You can practice different types of problems here. Personally, I think it's a very good Wargame site for beginners. This is because there are many problems with difficulty levels, but there are also many problems with easy difficulty levels.
In fact, if you googling Fornable-related wargame sites, a lot of sites like pwnable.kr and pwnable.tw are recommended. However, I don't recommend these wargame sites to beginners. Except for the first one or two questions, it's mainly for those who have some experience with Fornable. Therefore, it's not suitable for beginners to push. As I said above, when you first start Fornable, you can start by watching the Fornable course at DreamHack and pushing the Wargame questions to practice the contents of the course.
Also, if you googling about the introduction to Fornable, you'll get a lot of stories about hacker school LOB or FTZ. But I personally think hacker school is out of date. I also didn't go through hacker school's LOB or FTZ. Personally, I think the DreamHack Fornable curriculum is much better.
