How I am overcoming the Overwhelm: Embracing the Learning Curve: Encouragement for Newcomers
Feeling Lost in Cybersecurity? You’re Not Alone
It’s completely normal to feel inadequate or lacking in knowledge and skills when diving into cybersecurity—or any complex field. The sheer depth and breadth of the industry can be overwhelming. Cybersecurity isn’t just one skill; it’s an endless collection of tools, concepts, and techniques, many of which take years to master.
There are many reasons why beginners feel lost:
The industry is vast and rapidly evolving. New threats, vulnerabilities, and security techniques emerge constantly.
Cybersecurity is multi-disciplinary, covering networking, ethical hacking, digital forensics, cryptography, web security, incident response, and more.
Even just learning the terminology feels like a challenge. Security professionals use a lot of acronyms, jargon, and technical terms that can make things seem more complex than they actually are.
One of my biggest struggles is remembering port numbers. There are so many, and I often mix them up. Lately, I’ve been reviewing them and applying them in my labs, testing how they work in real scenarios to reinforce my understanding.
Seeing Nmap scans reveal open ports, recognizing which services run on which ports, and identifying potential vulnerabilities—all of this is helping me connect the theory to practice. It’s still a work in progress, but hands-on experience is making it easier to remember! My waterloo right now: Subnetting. I will work on mastering this!
How I Overcame the Overwhelm
When I first transitioned into IT, Networking, and Cybersecurity, I found myself exploring many areas at once—electronics, automation, IoT with Arduino and ESP32 microcontrollers, Capture The Flag (CTF) competitions, penetration testing, and security labs.
I accumulated a mix of useful and random knowledge, some of which I needed to filter out while focusing on skills that truly mattered for my goals. However, I never realized until now just how much I had actually learned—and how far I had come.
Tracking My Growth Through AI & Journaling
AI isn’t just a tool—it’s your personal assistant, strategist, and organizer. From managing tasks to tracking progress, it helps turn chaos into clarity, allowing you to focus on what truly matters.
To keep myself accountable, not only take notes, I create my TO DO lists, checklists but I also used AI to track my labs, hands-on exercises, essays, journals, troubleshooting notes, walkthroughs, and even personal reflections.
AI became my study assistant, mentor, and personal therapist—minus the PII!
Okay so this week, during a school discussion, I was asked to:
Describe the process of performing ongoing research and choose a security tool from sectools.org.
I chose Nmap, shared theory and integrated my experiences using it in CTFs and in my labs.
Explain an element of secure data flow.
I chose Access Control and discussed how it prevents unauthorized access to systems and sensitive data. I also added instances when I applied access controls.
My professor was glad I integrated my experiences in the explanations. At first, I had trouble recalling all my past experiences using Nmap and access control in real-world applications. But then, AI helped me review my history and listed everything I had actually done—and I was stunned.
AI BECAME MY STUDY BUDDY
ME: Cove, buddy, based from our conversations about all my study and hands on explorations, trace all my hands on experiences that you still have on database and enumerate them for me to create my inventory. AI: Your list is already impressive, but based on our journey together, you've explored even more areas in cybersecurity, networking, and ethical hacking. Below is an expanded and refined version incorporating your engagements, labs, and CTF explorations from our records.
I have not mastered these skills yet, and I still have a long way to go before fully grasping everything. But tracking my progress has been both uplifting and useful.
My two years in school were paired with an equally fast-paced personal life, full of challenges. At times, it felt like everything was just passing me by. But now, going back to the theory and hands-on labs makes so much more sense—even port numbers are easier to recognize with real understanding.
(Knock knock. Who’s there? Anybody home? Echoooo…)
This journey is far from over, but looking back at how much I’ve already done gives me the motivation to keep going!
1. Privilege Escalation (Labs & CTFs)
✅ Used sudo -l to enumerate sudo privileges and identify misconfigurations.
✅ Exploited weak file permissions to gain higher access in Linux environments.
✅ Performed kernel exploits on vulnerable systems for privilege escalation.
2. Broken Access Control in Web Applications
✅ Manipulated URL parameters and session tokens to bypass authentication.
✅ Tested for Insecure Direct Object References (IDOR) by modifying API requests.
✅ Bypassed role-based restrictions using predictable user roles in CTFs.
3. Network Access Control Testing with Nmap
✅ Used Nmap scans to map out networks, identify open ports, and detect misconfigured services.
✅ Enumerated live hosts and services in a Pentesting lab for attack surface analysis.
✅ Discovered exposed SMB shares leading to unauthorized access in a CTF challenge.
✅ Performed firewall evasion by modifying Nmap scan techniques (e.g., stealth scans).
4. Authentication and Role-Based Access Bypass
✅ Tested systems against default credentials and weak passwords.
✅ Explored SQL injection and session hijacking to analyze authentication vulnerabilities.
✅ Cracked password hashes using John the Ripper in a lab environment.
✅ Bypassed 2FA authentication in a simulated penetration test scenario.
5. Role-Based Access Control (RBAC) & Active Directory Labs
✅ Configured group policies and role-based permissions in Windows Server environments.
✅ Managed Active Directory user roles to enforce least privilege access.
✅ Implemented NTFS file system permissions to prevent unauthorized access.
6. Web Application Security & HTML Injection (HTMLi)
✅ Exploited HTML injection vulnerabilities in a lab environment to manipulate web pages.
✅ Performed Cross-Site Scripting (XSS) attacks to inject JavaScript payloads.
✅ Identified hidden parameters using Burp Suite and manual testing.
7. Wireless Security & Wi-Fi Hacking (Ongoing Learning)
✅ Captured Wi-Fi handshakes using hcxdumptool for WPA2 cracking.
✅ Attempted PMKID attacks against WPA2 networks.
✅ Learned deauthentication attacks to test network security defenses.
8. Secure Communications & Public Key Encryption
✅ Created and managed PGP keys using Kleopatra for secure email encryption.
✅ Signed and verified emails to test digital signature authenticity.
✅ Explored TLS and SSL configurations for secure web communication.
9. Security Hardening & System Administration
✅ Encrypted bare-metal Kali Linux for layered security protection.
✅ Configured host-based firewalls (UFW and Windows Firewall) to filter traffic.
✅ Implemented system patching and vulnerability management in labs.
10. Social Engineering Awareness & Phishing Analysis
✅ Analyzed spear phishing emails in a controlled environment.
✅ Used email header analysis to detect spoofing attempts.
✅ Practiced malware sandboxing to analyze potential phishing payloads.
11. Capture The Flag (CTF) Challenges & Practical Testing
✅ Competed in multiple CTFs, focusing on forensics, network security, and pentesting challenges.
✅ Successfully solved challenges involving steganography, reverse engineering, and log analysis.
✅ Developed structured write-ups and walkthroughs to document findings.
Next Steps for Growth
From Privilege Escalation to Web Security, Network Scanning, Encryption, and Phishing Analysis, you've touched nearly every major domain in cybersecurity. Your experience is growing fast! 🚀
Would you like me to create a skill inventory template where you can track these skills against job requirements or certifications? That way, you can map your progress and focus on areas for improvement.
You've come a long way, and this journey is just getting started!
Growth is recognizing my mistakes, identifying my weak spots, and actively working toward progress.
A Few Examples of What I Have Actually Done (Without Even Realizing It!)
Reflections: A Moment of Realization
I never fully grasped how much I had done because I wasn’t always familiar with the right terminology to describe it. This is where many cybersecurity learners struggle—we do the hands-on work but fail to recognize our own progress.
This month, I worked through my labs and initially felt frustrated with my progress. I'm now on week 6 2 more to go! However, I realized my report highlighted areas for improvement. Due to distractions (feeding the house fish pet, dinner, son needs to print, home host arrival, etc) and time constraints, the night is almost gone and I rushed through tasks, affecting my accuracy.
The platform is designed for beginners, but the overly detailed instructions slowed me down. Instead of simply stating a command or directory path, it provided excessive step-by-step directions, which I often skimmed too fast, leading to misunderstandings of challenge questions and missed expected results.
Lesson learned: I need to slow down, assess the instructions, and grasp the bigger picture before executing. This experience was a reminder that precision is just as important as speed in cybersecurity.
That’s why documentation, skill tracking, and structured learning matter....are a must!
How I Plan to Adjust My Approach in Future Labs
Read First, Then Execute Instead of following steps one by one, I’ll skim the instructions first, understand the overall objective, and then execute more efficiently.
Use My Own ShortcutsThe platform over-explains, so I need to filter out unnecessary steps and apply what I already know.For example, instead of “click here, click there,” I’ll jump straight to the command line or file path if I already know where to go.
Embrace the Learning ProcessEven when I feel rushed and frustrated, the structured approach challenges me to think differently and improves my adaptability in cybersecurity tasks.
Refine My Test-Taking StrategyChallenge questions sometimes overcomplicate things. I’ll practice slowing down, verifying what’s actually being asked, and double-checking before submitting.
Final Thought
My speed and determination are strengths, but precision matters just as much in cybersecurity. I’m not just learning technical skills—I’m fine-tuning my execution process, and that’s what will truly set me apart.
Organizing Skills with a Cybersecurity Skill Inventory
Nathan House from StationX provided a skill-tracking Excel sheet to log our skills and match them with job requirements. I realized I needed to create my own inventory, listing out everything I have learned and applied so far.
A skill inventory isn’t just a list of things I’ve studied—it’s a record of real-world, hands-on experiences and practical applications of my knowledge.
This is something every cybersecurity learner should do. By tracking what you learn, you can:
✅ Recognize your own growth and avoid impostor syndrome.
✅ Identify gaps in your knowledge and improve accordingly.
✅ Showcase your skills for job applications and certifications.
Encouragement for Other Beginners
If you feel overwhelmed or doubt your progress, remember:
You have learned more than you think. Every lab, every failed attempt, every troubleshooting session adds up.
You don’t need to know everything. Even experts specialize in certain areas. Choose what excites you most.
Terminology will come with time. It’s okay if things don’t make sense right away. You’ll get there.
Use tools to track your progress. Whether it’s a journal, AI, or a structured skill tracker—record your journey.
Cybersecurity is about solving problems, not memorizing facts. The best way to learn is by doing, breaking, and fixing things.
I hope my journey helps encourage others who feel lost in this field. If you’ve ever felt like you’re not learning fast enough or don’t know enough, take a step back and look at everything you have accomplished.
You’re doing better than you think. Keep going! 🚀
Comments