Getting started on InfoSec

Wiki ▸ InfoSec ▸ Getting started on InfoSec

Even if you're someone who usually just throws themselves into things you find interesting to learn more about it, our InfoSec page can feel a bit overwhelming. (There's so much…stuff…there!) This page attempts an even gentler introduction to the same material by compiling recommendations from others who have been there before.

• Start with Mr. Robot, and pair it with the syllabus
• Start with a few PicoCTF challenges, then follow up with Hacker Highschool

📝 Editors: Feel free to add your suggestions for how newbies can get started. Use a template such as this:

# Brief summary or synopsis in a single sentence.

Paragraph introducing your rationale for why you suggest this approach,
why it worked for you, what was good about it, and so on. Maybe also include
some caveats or some things you wish you'd known about this approach before
you started down it.

**Do this:**

1. First step.
1. Second step.
1. Third step. (And so on….)

"Start with Mr. Robot, and pair it with the syllabus."

If TV shows are your thing, and you don't mind using them to study instead of just watching them passively (y'know, pausing the show, looking stuff up, then continuing when your interest in the real world wanes), consider starting out by using our Mr. Robot's Netflix 'n' Hack syllabus. You could also watch the show a first time and then re-watch it with a more studious intention a second time.

Do this:

1. Download/stream/somehow acquire (coughpiratecough) Mr. Robot episodes from…somewhere.
2. Watch the first episode.
3. Watch the first episode a second time, following along with the syllabus and pausing to read the links. Don't worry about actually installing shit on your box, just start to get a feel of all that is out there and begin reading/browsing/exploring what actually exists and how "real" it all is (or isn't). The syllabus is explicit about what is real and what is not. You will probably be shocked at how you can literally just click on a link from the syllabus and be right in the thick of some "real hacker shit."
4. Download and optionally print out the Hacker Highschool PDFs (these are also listed in InfoSec § Lesson plans and guidance, and start reading. (Ignore the bullshit American exceptionalism and capitalist propaganda. In fact, find someone to make fun of it with. Trust us, it helps.)
5. Do the exercises in the Hacker Highschool course, and incrementally work your way through Mr. Robot Season 1 as you read more of the course. Focus on whichever thing feels more fruitful to you.
6. As you get more curious/comfortable, read the rest of the InfoSec page and follow links to the various other things there. Especially the § For defenders parts.
7. Try out the Mr. Robot Trains the Trainers exercises at whatever pace you want to. Help us make more of them!

"Start with a few PicoCTF challenges, then follow up with Hacker Highschool."

For people who prefer to "learn by doing," consider trying to tackle any of the PicoCTF challenges. These hacking puzzles are designed for younger teenagers and are thus an easily approachable starting point for all ages and skill levels. When you get stuck or feel like taking a break, start reading Hacker Highschool lessons.

Do this:

1. Visit PicoCTF.com in your Web browser of choice.
2. Register a new account, and begin to play the game(s).
3. Take some time alone or with a friend to solve the first few challenges (they will almost certainly be within your abilities).
4. Download and optionally print out the Hacker Highschool PDFs (these are also listed in InfoSec § Lesson plans and guidance, and start reading. (Ignore the bullshit American exceptionalism and capitalist propaganda. In fact, find someone to make fun of it with. Trust us, it helps.)
5. Do the exercises in the Hacker Highschool course, and incrementally work your way through additional PicoCTF challenges as you read more of the course. Focus on whichever thing feels more fruitful to you.
6. As you are able to solve increasingly difficult challenges, explore the remainder of the InfoSec page and follow links to the various other things there (especially the § For defenders parts).