Newbie-Always wanted to be a White Hat. After many years of dodging life's spanners I'm on my way. Very little experience but think I'm going to start with python, then metaspoilt and Ruby.

Any tips Guys?

look into the Kali linux distro. then look up some tutorials on how to use the tools.

I have installed kali on a VM but not used it yet.
I do have some understanding of networks & firewalls etc & I plan to learn how attacks are performed but I'm thinking if I can code then it should be easier to understand the flaws etc.

it certainly helps with sql injections, looking for posts while sniffing packets, cross site scripting. there are some good courses out there you can follow. oh and sites to practice on.

I've registered on cybrary so I'll work my way through those videos.

Are there specific sites built for this stuff? If so can you name any?