As a CSIT student in my first semester, I've tried different areas of cybersecurity. HackTheBox is great for practice. I use Kali Linux because it’s easy and has a lot of useful tools, like:
Nmap - Scans networks to find devices.
Wireshark - Helps you see and analyze network traffic.
Metasploit - Helps you find and test security weaknesses.
Burp Suite - Tests website security.
John the Ripper - Cracks passwords.
CTF challenges are also a fun way to learn. Watching videos is really helpful too. If you start now, you’ll learn a lot fast!
