Learn cyber security from zero
One clear road from “how does the internet work?” to finding and fixing real weaknesses. No experience needed. You learn by doing, one stop at a time.
Step by step
Your learning path
-
Stop 1
How the internet works
- play_circle What happens when you open a website
- play_circle IP addresses, ports and protocols
- play_circle DNS: how names become addresses
- play_circle Watching real traffic with Wireshark
-
Stop 2
Linux basics
- play_circle The command line and the file system
- play_circle Users, permissions and sudo
- play_circle Processes, services and packages
- play_circle Setting up your own lab
-
Stop 3
How websites work
- play_circle HTTP requests and responses
- play_circle Cookies, sessions and logins
- play_circle Databases and how sites talk to them
- play_circle Reading a site with browser developer tools
-
Stop 4
Python for security
- play_circle Variables, loops and functions
- play_circle Working with files and text
- play_circle Talking to the network with Python
- play_circle Writing your first security script
-
Stop 5 · How attacks work
How attackers think
- play_circle The attacker mindset and the kill chain
- play_circle Types of attackers and what they want
- play_circle Staying legal: scope, permission and ethics
-
Stop 6 · How attacks work
Reconnaissance and scanning
- play_circle OSINT and footprinting
- play_circle Nmap and service enumeration
- play_circle Vulnerability scanning and triage
-
Stop 7 · How attacks work
Web attacks
- play_circle SQL injection
- play_circle Cross-site scripting (XSS)
- play_circle Broken access control and authentication
- play_circle Testing a site with Burp Suite
-
Stop 8 · How attacks work
Passwords
- play_circle How passwords are stored: hashing and salting
- play_circle Cracking passwords and credential reuse
- play_circle Phishing and social engineering
-
Stop 9 · How to defend
Cryptography basics
- play_circle Symmetric and asymmetric encryption
- play_circle TLS, certificates and HTTPS
- play_circle Common cryptography mistakes
-
Stop 10 · How to defend
Securing a system
- play_circle Hardening a Linux server
- play_circle Firewalls and network segmentation
- play_circle Patching, backups and least privilege
-
Stop 11 · How to defend
Spotting an attack
- play_circle What logs are and where to find them
- play_circle Detection and alert triage
- play_circle Following an attacker through the logs
-
Stop 12 · How to defend
Responding to an attack
- play_circle The incident response process
- play_circle Forensic basics
- play_circle Writing an incident report
-
Stop 13 · Prove it
Final project
- play_circle Full assessment of a practice target
- play_circle Professional findings report
- play_circle Remediation plan and debrief
-
Stop 14 · Red team
Advanced web exploitation
Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.
-
Stop 15 · Red team
Privilege escalation
Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.
-
Stop 16 · Red team
Active Directory attacks
Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.
-
Stop 17 · Red team
Running a red team engagement
Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.
-
Stop 18 · Blue team
Security monitoring and SIEM
Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.
-
Stop 19 · Blue team
Threat hunting
Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.
-
Stop 20 · Blue team
Digital forensics
Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.
-
Stop 21 · Blue team
Leading incident response
Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.