Study Material

  🎯 Overall Strategy You’ll study: 4–5 hours daily 2 sessions per day Skill + theory balance 🗓 DAILY STUDY STRUCTURE (Repeatable Weekly Format) Time Focus Morning (2 hrs) UGC NET Evening (2–3 hrs) Cybersecurity If busy: Minimum = 3 hrs/day (1.5 + 1.5 split) 📘 UGC NET (Computer Science) Study Plan UGC NET has: Paper 1 (Teaching & Research Aptitude) Paper 2 (Computer Science) 🧠 UGC NET SYLLABUS BREAKDOWN (Paper 2) Important Units: Discrete Mathematics Digital Logic Computer Organization Programming & Data Structures Algorithms Theory of Computation Compiler Design Operating Systems Databases Computer Networks Software Engineering 📅 UGC NET DAILY PLAN (Morning Session – 2 Hours) 🔹 Monday 1 hr: Discrete Mathematics 1 hr: MCQs practice 🔹 Tuesday 1 hr: Data Structures 1 hr: Previous Year Questions 🔹 Wednesday 1 hr: Theory of Computation 1 hr: Notes revision 🔹 Thursday 1 hr:...

  📘 PHASE 5: Advanced Topics (Month 8–12) ☁️ Cloud Security AWS IAM Misconfigured S3 buckets API security 🔐 Cryptography Hashing (MD5 vs SHA256) Symmetric vs Asymmetric encryption RSA basics TLS handshake 🔎 Digital Forensics Log analysis Memory dumps Incident response 🧠 Red Team vs Blue Team Red Team Blue Team Attack Defend Find vulnerabilities Monitor logs Exploit Patch 🏆 Certifications Path Beginner: eJPT Security+ Intermediate: CEH Advanced: OSCP 🔥 1-Year Outcome If You Follow This You will: Understand system internals Find real vulnerabilities Do bug bounty Apply security to your own projects Become job-ready 💡 For You Specifically Since you build: Student Management System V-Connect Shopping App Start applying: Input validation Password hashing Rate limiting Secure file uploads Proper authentication flow This will turn you into a Security-aware Develo...

  📕 PHASE 4: Real Practice Platforms Only practice legally: TryHackMe Hack The Box PortSwigger Web Academy Start with: Pre Security Path Jr Penetration Tester

  📙 PHASE 3: Ethical Hacking Tools (Month 5–7) 🔍 Nmap (Scanning) nmap -sV target.com Learn: Port scanning Service detection OS detection 🐞 Burp Suite 4 Learn: Intercepting requests Modifying parameters Finding hidden fields Testing authentication 💣 Metasploit Learn: Exploit modules Payloads Reverse shell

  📗 PHASE 2: Web Security Core (Month 3–4) 🔥 OWASP Top 10 (Very Important) 4 1️⃣ SQL Injection Vulnerable code: SELECT * FROM users WHERE username = '$user' ; Attack: ' OR ' 1 '=' 1 Fix: Prepared statements Parameterized queries 2️⃣ XSS (Cross-Site Scripting) Stored XSS: Malicious script saved in DB Reflected XSS: Injected via URL Fix: Escape output Use Content Security Policy 3️⃣ CSRF User logged in → attacker forces request. Fix: CSRF tokens 4️⃣ Broken Authentication Fix: Strong hashing (bcrypt) Secure session handling

  🚀 CYBERSECURITY COMPLETE ROADMAP (Beginner → Advanced) 📘 PHASE 1: Foundations (Month 1–2) 1️⃣ Networking Deep Dive (Core Backbone) 🔹 What You Must Understand OSI Model (7 Layers) Layers: Physical Data Link Network Transport Session Presentation Application 👉 Real understanding: HTTP works at Application layer TCP works at Transport layer IP works at Network layer TCP vs UDP TCP UDP Reliable Fast Connection oriented Connectionless Used in HTTPS Used in streaming Important Concepts IP Address (IPv4, IPv6) Subnetting DNS (How google.com becomes IP) ARP Ports (80, 443, 22, 21, 3306) Three-way handshake (SYN → SYN-ACK → ACK) Tools Practice Wireshark → Capture packets ping, traceroute netstat nslookup 2️⃣ Linux Mastery (Month 1–2) 4 Install: Kali Linux (VirtualBox) Learn: File Structure /etc /var /home /bin /root Important Commands ls cd chmod chown grep cat nano find ps kill apt install Permissions Example: -rwxr-xr-- Meaning: Owner: read write execute Group: read execute O...

  💻 Phase 3: Practical Hacking Practice (4–8 Months) Never hack real websites ❌ Practice legally on platforms: TryHackMe Hack The Box PortSwigger Web Security Academy Start with beginner rooms. 🧪 Phase 4: Tools You Must Learn Tool Purpose Nmap Network scanning Burp Suite Web app testing Metasploit Exploitation Wireshark Packet analysis John the Ripper Password cracking Hydra Brute force 🎓 Certifications (Optional but Powerful) Start with: CEH (Certified Ethical Hacker) CompTIA Security+ eJPT (Beginner friendly)

  🛡 Phase 2: Core Cybersecurity Concepts (2–4 Months) 🔍 1. Types of Cybersecurity Understand domains: Ethical Hacking Web Security Network Security Cloud Security Digital Forensics SOC Analyst Malware Analysis 🌐 2. Web Application Security (Very Important for You) Since you build web apps like: Student Management System V-Connect Jinni Shopping App You should learn how they can be attacked. Study: SQL Injection XSS (Cross Site Scripting) CSRF Authentication bypass Session hijacking Resource: 👉 OWASP Top 10

  Phase 1: Build Strong Foundations (0–2 Months) Before jumping into hacking tools, master the basics. 🖥 1. Computer Networking (Very Important) Learn: OSI & TCP/IP model IP, Subnetting DNS, DHCP HTTP / HTTPS Ports & Protocols Tools to explore: Wireshark Packet Tracer 🐧 2. Linux Fundamentals Most cybersecurity tools run on Linux. Learn: File system structure Commands (ls, grep, chmod, nano, etc.) Users & permissions Process management Install: Kali Linux (Virtual Machine using VirtualBox) 🧠 3. Basic Programming Since you already work with PHP, Node.js, Firebase — that’s a big advantage. Focus on: Python (for automation & scripting) Bash scripting Basic understanding of JavaScript vulnerabilities