A penetration tester is paid to break into systems legally, then explain clearly how to fix what they found. The hacking is only half the job; the other half is writing and talking, so reports and client conversations matter as much as exploits. You will start with networking, Linux and basic scripting, because you cannot attack what you do not understand. Then you practice on free legal labs (TryHackMe, Hack The Box, PortSwigger Web Security Academy), learn the standard methodology (recon, enumeration, exploitation, post-exploitation, reporting), and build a public portfolio of write-ups. Mos
See the full roadmap free
Every stage from beginner to expert, with lessons, practice drills, projects, interview questions and free resources. Free with a Rolearch account.
Stage 1 of 3 · about 16 weeks
Understand how networks, operating systems and web apps work, and run your first legal attacks in a safe lab.
Networking fundamentals
Every attack travels over a network. If you know how TCP handshakes, DNS and HTTP work, tool output stops being magic and you can spot what is exposed.
Linux and command line
Most pentest tools run on Linux, and most servers you attack run it too. Comfort in the terminal makes you fast.
Scripting with Python and Bash
Pentesters automate boring work: port scans, parsing output, trying many inputs. A short script saves hours and shows employers you can think.
Core security concepts
You need the vocabulary and the reasoning: the CIA triad, authentication vs authorization, encryption vs hashing, and common weaknesses. This lets you explain risk to clients.
First guided labs
Doing beats reading. Guided rooms teach the pentest cycle in small safe steps and build confidence.
Then 2 more stages (about 76 weeks in all) with lessons, drills, projects, 6 interview questions with strong answers and free resources.