(untitled)

How do I make a jump from Computer Engineering (yet to graduate) to cybersecurity? I can't figure out where to start at all.

>>5109 Very good question. It's all dependent on your experience and how much you're willing to tinker, really. In all practicality? There's not too terribly much you'll have to learn that you can't. Perhaps start with some stuff like overthewire and exploit-exercises, do some CTF's, download some VM's from vulnhub and other places. The important thing is to just START. Don't worry about soykaf, just start tinkering. Don't know how to exploit $(service)? Read the RFC, read, read, read, read as much as you can.

>>5109 The question isn't so much how but why? There are tons of "cyber" roles that are nothing more than glorified scrum masters, PMPs, etc. Some roles are just managing risk matrix output in .csv documents to pipe into some single glass for a dipsoykaf exec. So if you just want to be in the field, you're probably good. Now, if the question of "why" makes you noodle it over a few times and you say "I want to be able to attack" or "i want to be a pentester" or "i want to be in appsec for code review" or even "i want to be a red teamer" I think the first lain's comment is more apt... you have to want to tinker. What does that really mean though? It means you need to be a self starter and a self learner-the field is constantly changing and so you have to be able to stay abreast of things. CTFs are a great way to learn, vulnhub, overthewire, hackthebox, exploit-db's paper section, etc. are probably better if you're new since you can look up the answers (there is nothing wrong with this, you have to learn something to be able to do it....). There are a lot of basics out there but most of it is deprecated patterns-be prepared to innovate and modify your techniques to attack better/faster/stronger. To echo the previous poster... read read read (and know whats a good read vs. a bad read). If you know hardware, get into IoT / ARM. If you know code, get into appsec. If you're a derelict low-life learn how to spin up AWS/Digital Ocean/Azure infrastructure and practice phishing yourself or willing targets. When the nooblet is ready, the master will appear

What I've been doing to get into security is: hackthissite (very easy) and overthewire (easy - hard) and vulnhubs/hacktthebox (easy - very hard) read art of exploitation (from 0 - baseline type thing) I'm still reading art of exploitation and I've got black hat python and RE 4 beginners. If you're already doing CE it's going to be easy. I Didn't start from 0 but pretty close. and this >>5110

Read books - Art of Exploitation, Web Hacker's Handbook, etc. Do the OSCP. You're now ready for a very entry-level position in cybersecurity (at least in pentesting etc)