How do I learn Ethical Hacking in India?

In this post you will know how to learn ethical hacking in India. Before moving ahead let me first clear to your what hacking means , who are hackers and how words like ethical hackers or white hat hacker originated : The word hacker is too old world (more than 200 years ago also it was used) and not confined to computers or networks. People who kept on trying new things or keep on trying to make something better than what already existed were called hackers. Later during world war times the need to make algorithms to securely tranfer data (secure communications) was realised and hackers became the persons who were making the new algorithms to solve such issues. With time hackers became persons who would test computer or network systems (by breaking into them) to them better. But the media limited the world to cyber criminals. So to make things a bit better and remove the wrong perception of the meaning of word hacking terms like White hats or ethical hackers were introduced ( to clear to the public that these are the guys working hard to make things better and not malicious guys). Hacking basically stands for exploitation of something. Hackers are people who exploit computer and network systems ( limiting the definition to digital world).

Be clear with what you want to be : A person who has some certification related to ethical hacking OR A good penetration tester OR A good bug hunter - the one who finds vulnerabilities in networking or computer systems. The first one is pretty useless (unless you just want to impress some company or your friends).

To be a hacker, you have to be genuinely interested, read obsessed with computers. You have to live and breathe them. You need to understand them well, like they are part of your very being. You also need to have attention to detail, have good programming skills and a lot of presence of mind.

Learn programming well. Learn Operating Systems and Computer Networks well. Learn Cryptography. Learn Linux and shell programming. Install Kali Linux, create virtual machines, or best, create your own Linux distribution. Hack into test systems, run viruses on them. Learn assembly language and try to crack software. Build on this to perform malware analysis. Create and test your own malware.

Do not use any ready made software or tools. If you do so, you are nothing but a script kiddie.

Practice and perseverance is key. Taking “ethical hacking” sources and doing certifications won’t get you very far. Real knowledge and understanding will.

The certifications which might be useful for you in the cyber security industry (most people do not really care about them though) are:

1. Cisco certifications: CCNA, CCNP, etc
2. Auditing: ISO 27001:2013, CISA
3. Penetration Testing and Offensive security: OSCP (This is the best certification you can take)
4. Holistic view of security: CISSP

Technologies: Cyber Ark, ArcSight, Proprietary firewall related.
Please bear in mind, all these certifications require relevant work experience.