Can a BCA Student Become an Ethical Hacker Without a Degree?

Ethical hacking practice plan (legal labs only):

Week 1 — Linux + networking basics
   - TryHackMe beginner rooms
   - Wireshark packet captures

Week 2 — Web security fundamentals
   - OWASP Top 10
   - PortSwigger labs (SQLi, XSS)

Week 3 — Tools & recon
   - Nmap, Burp Suite, ffuf
   - Recon on legal lab targets

Week 4 — Build a report
   - Document a lab engagement
   - Problem → evidence → fix → risk

Never test on systems without written permission.

Weekly review:
□ Did I use a legal lab environment only?
□ Do I understand what each tool does?
□ Can I explain my findings clearly?
□ Have I documented my work?
□ Am I following a scope and rules of engagement?
□ Am I updating my portfolio / notes?

Skills gained this week:
1. 
2. 
3. 

Next week's target:
_______________________________________________

Recommended certifications (beginner → intermediate):

Entry level:
- CompTIA Security+
- eJPT (INE)

Intermediate:
- CEH (Certified Ethical Hacker)
- OSCP (Offensive Security Certified Professional — advanced)
- CompTIA PenTest+

Why these:
- They are respected by employers
- They test real, practical skills
- They pair well with a BCA background

Career progression path:

Junior roles:
- SOC Analyst
- Junior Penetration Tester
- IT Security Support

Mid-level:
- Penetration Tester
- Application Security Analyst
- Red Team Operator

Senior:
- Senior Pentester
- Security Consultant
- Red Team Lead
- Head of Security

Degrees help, but skills and certifications
are what make the difference.

Month 1 — Foundations:
Week 1 — Linux command line essentials
Week 2 — Networking basics (TCP/IP, DNS, HTTP)
Week 3 — Python for security scripts
Week 4 — Web security and OWASP Top 10

Daily routine:
9:00 AM — Learn concepts (1 hour)
11:00 AM — Practice on legal labs (2 hours)
2:00 PM — Read writeups (30 min)
5:00 PM — Document notes (30 min)

Milestones:
□ Comfortable in Linux terminal
□ Understand HTTP, DNS, TCP/IP
□ Basic web vulnerability concepts

Month 2 — Real Labs:
Week 5 — TryHackMe / HackTheBox beginner labs
Week 6 — Web exploitation practice
Week 7 — Recon and enumeration
Week 8 — Document a full lab report

Daily routine:
9:00 AM — Study (1 hour)
11:00 AM — Lab practice (2-3 hours)
3:00 PM — Read reports (30 min)
5:00 PM — Notes + portfolio (1 hour)

Milestones:
□ 2-3 labs completed with reports
□ Familiar with Burp, Nmap, Wireshark
□ Can explain findings clearly

Month 3 — Portfolio & Interviews:
Week 9  — Cert prep (Security+ or eJPT)
Week 10 — Portfolio site + writeups
Week 11 — Mock interviews
Week 12 — Apply to cyber security roles

Daily routine:
9:00 AM — Cert study (2 hours)
11:00 AM — Portfolio/writeups (2 hours)
2:00 PM — Apply + network (1 hour)
5:00 PM — Interview prep (1 hour)

Milestones:
□ 1 certification exam booked or passed
□ 3 well-documented lab writeups
□ 30+ applications sent

Daily Tracker:
Date: _________
☐ Morning routine completed
☐ Study (1 hour)
☐ Lab practice (2 hours)
☐ Read 1 writeup (30 min)
☐ Notes / journal (30 min)
☐ Exercise completed
☐ Reviewed progress
☐ Planned tomorrow

Today's small win:
1. ___________________________________________

Tomorrow's tiny goal:
1. ___________________________________________

Weekly Tracker:
Week: _____ (Month 1 / 2 / 3)

One goal for this week:
_______________________________________________

Daily Progress:
Mon: ☐☐☐
Tue: ☐☐☐
Wed: ☐☐☐
Thu: ☐☐☐
Fri: ☐☐☐
Sat: ☐☐☐
Sun: ☐☐☐

Labs completed / writeups:
1. 
2. 

Key learning:
_______________________________________________

Next Week's one goal:
_______________________________________________

Monthly Tracker:
Month: _____ (1 / 2 / 3)

Monthly Goal:
_______________________________________________

Week 1 Progress: ☐☐☐
Week 2 Progress: ☐☐☐
Week 3 Progress: ☐☐☐
Week 4 Progress: ☐☐☐

Monthly Wins:
1. 
2. 
3. 

Skills Gained:
1. 
2. 
3. 

Labs / CTFs Completed:
1. 
2. 
3. 

Applications Sent: _____
Interviews: _____
Offers: _____

Next Month's Goal:
_______________________________________________