Cybersecurity is not magic. It's applied IT knowledge.
Before learning tools like metasploit, burpsuite, nmap, you must understand:
1. Basic Security Concept: As a beginner who wants to learn cybersecurity you must understand the following Security Concept.
a. CIA Triad: Which means Confidentiality, Integrity, and Availability. Which is the foundation of cybersecurity.
b. Identification, Athentication, Athurization, Auditing ( IAAA) : It's am access control model that ensures the right people access the right resources, and their activities are track.