I am currently teaching myself computer security and pentesting. My problem is the following: I more or less know the absolute basics (tcp/ip, bufferoverflows, xss...) but in all those areas I dont have complete and deep understanding of the topics. My current way of teaching myself is doing wargames, right know pwnable.kr, and then I try to read myself into the exercise until I can solve it. Unfortunately at wargames there are often no good answers or solutions and often when I google the topics I only fing very superficial explanations of what is going on.
- So my first problem is: How do I get a deep understanding of common vulnerabilities and how to exploit them?
My second problem is this if a very unstructured approach and I feel like I am missing out on important things. What would you recommend? What is a good approach to get from "I pretty much know the basics" to "I can apply my knowledge to pentesting and can solve wargames/ctf's" ?
- In other words: Program/List/FAQ/Course about pentesting that guides you from easy things to the advanced stuff?
I am thinking about all those fitnes websites that have detailed plans how to make progress where you personally stand.
- Are there any good moocs for computer security?
My personal goal is to compete in a live ctf someday, so I want to teach myself the skills needed for that. Thank you so much!