Becoming a Penetration Tester

Hello everyone,

First a little bit about my self:

• I have almost 5 years of experience in IT
• My job mostly involves configuring networks (Cisco) and managing virtual infrastructure (VMWare)
• I'm also very efficient with PHP, HTML\CSS

Now my story:

Security was always my passion but sadly due to personal circumstances never had the chance to chase it.

Recently I was able to dedicate an hour of my day to Security only. I bought a Security+ course and watched all of it. Now I'm wondering how to continue? I have all the basics down but where to start learning how to penetrate?

• Should I go for CEH?
• Pay 5k for a SANS boot camp?
• Learn Python, Java or Objective C?
• Master Kali Linux?

My idea is to Learn Kali Linux Get CEH Finally learn Python and C

So what do you guys think about my path? What is the right way to become a Pen Tester?

Thanks in advance.

Edit:...