It depends on what direction you want to take. If you want to be a pentester or want to work in virology, for pentesting I’d recommend downloading Kali Linux because it has all the basic tools. Then I’d advise you to read the forum, watch YouTube, and look into what vulnerabilities exist on websites. To be honest, I only know about SQL injection for virology. I’d advise you to learn programming if you want to write viruses yourself, or to buy them in bytes, or to find them. But overall, I’d recommend testing tools like Ratchet as an admin — after all, on a virtual machine.