Ethical Hacking Roadmap 2026: From Beginner to OSCP

What is Ethical Hacking?

Ethical hacking is the practice of using the same techniques as real attackers — with written authorisation — to find vulnerabilities before they are exploited. It is the highest-skilled and highest-paid domain in cybersecurity. The path is long but every step builds practical, employable skill.

The Correct Learning Order

Step 1 — Foundations (3 months):

Networking (TCP/IP, DNS, HTTP/S, how packets travel), Linux command line (essential — attackers use Linux), Python scripting (automate tasks, write simple exploits), and how web applications work (request/response, cookies, sessions, authentication flows). Skip this foundation and you will struggle with everything else.

Step 2 — Core Security Concepts (2 months):

OWASP Top 10 (the 10 most common web vulnerabilities), cryptography basics (symmetric, asymmetric, hashing), network protocols in depth (TCP handshake, ARP, DNS poisoning concepts), and Windows/Linux privilege escalation.

Step 3 — Hands-on Practice (ongoing):

TryHackMe for guided beginner labs. HackTheBox for realistic challenges. DVWA (Damn Vulnerable Web Application) locally for web app practice. VulnHub for downloadable vulnerable machines.

Tool Stack You Must Know

# Reconnaissance
nmap -sC -sV -O target.ip          # port scan + service detection
subfinder -d example.com           # subdomain enumeration
theHarvester -d example.com -b google  # OSINT emails and domains

# Web Application Testing
# Burp Suite Community (free) — intercept and modify HTTP requests
gobuster dir -u http://target.com -w /usr/share/wordlists/dirb/common.txt
nikto -h http://target.com

# Exploitation
msfconsole                         # Metasploit Framework
searchsploit apache 2.4            # search local exploit database

# Post-exploitation
linpeas.sh                         # Linux privilege escalation enumeration
winpeas.exe                        # Windows privilege escalation

Certification Path

eJPT (eLearnSecurity Junior Penetration Tester): Start here. Practical exam, affordable (~$200), good validation for beginners. Pass rate is high for prepared candidates.

CEH (Certified Ethical Hacker): Common in Indian job postings. Mostly theoretical, multiple choice. Good for resume visibility.

OSCP (Offensive Security Certified Professional): The gold standard. 24-hour hands-on exam — you hack 5 machines and write a professional report. No hints, no multiple choice. Highly respected by every serious security employer. Aim for this after 6-12 months of consistent practice.

Salary in India (2026)

Entry (CEH level): Rs 4-8 LPA. Mid (2-3 years, bug bounties): Rs 12-25 LPA. Senior (OSCP, red team): Rs 25-50 LPA. Top bug bounty hunters: Rs 50+ LPA equivalent from program rewards.

The fastest path to high income: CEH for employment + consistent HackTheBox + OSCP target within 12 months. See Security Academy for the complete path.