Built for complete beginners

Learn cyber security from zero

One clear road from “how does the internet work?” to finding and fixing real weaknesses. No experience needed. You learn by doing, one stop at a time.

Step by step

Your learning path

flag You start here
  1. Course 1

    Security Foundations

    Beginner Open
  2. Course 2

    Cyber Security 101

    Intermediate Open
  3. Course 3

    Red team

    Advanced
    Coming later
  4. Course 4

    Blue team

    Advanced
    Coming later
  5. Stop 1

    How the internet works

    • play_circle What happens when you open a website
    • play_circle IP addresses, ports and protocols
    • play_circle DNS: how names become addresses
    • play_circle Watching real traffic with Wireshark
  6. Stop 2

    Linux basics

    • play_circle The command line and the file system
    • play_circle Users, permissions and sudo
    • play_circle Processes, services and packages
    • play_circle Setting up your own lab
  7. Stop 3

    How websites work

    • play_circle HTTP requests and responses
    • play_circle Cookies, sessions and logins
    • play_circle Databases and how sites talk to them
    • play_circle Reading a site with browser developer tools
  8. Stop 4

    Python for security

    • play_circle Variables, loops and functions
    • play_circle Working with files and text
    • play_circle Talking to the network with Python
    • play_circle Writing your first security script
  9. Stop 5 · How attacks work

    How attackers think

    • play_circle The attacker mindset and the kill chain
    • play_circle Types of attackers and what they want
    • play_circle Staying legal: scope, permission and ethics
  10. Stop 6 · How attacks work

    Reconnaissance and scanning

    • play_circle OSINT and footprinting
    • play_circle Nmap and service enumeration
    • play_circle Vulnerability scanning and triage
  11. Stop 7 · How attacks work

    Web attacks

    • play_circle SQL injection
    • play_circle Cross-site scripting (XSS)
    • play_circle Broken access control and authentication
    • play_circle Testing a site with Burp Suite
  12. Stop 8 · How attacks work

    Passwords

    • play_circle How passwords are stored: hashing and salting
    • play_circle Cracking passwords and credential reuse
    • play_circle Phishing and social engineering
  13. Stop 9 · How to defend

    Cryptography basics

    • play_circle Symmetric and asymmetric encryption
    • play_circle TLS, certificates and HTTPS
    • play_circle Common cryptography mistakes
  14. Stop 10 · How to defend

    Securing a system

    • play_circle Hardening a Linux server
    • play_circle Firewalls and network segmentation
    • play_circle Patching, backups and least privilege
  15. Stop 11 · How to defend

    Spotting an attack

    • play_circle What logs are and where to find them
    • play_circle Detection and alert triage
    • play_circle Following an attacker through the logs
  16. Stop 12 · How to defend

    Responding to an attack

    • play_circle The incident response process
    • play_circle Forensic basics
    • play_circle Writing an incident report
  17. Stop 13 · Prove it

    Final project

    • play_circle Full assessment of a practice target
    • play_circle Professional findings report
    • play_circle Remediation plan and debrief
  18. Stop 14 · Red team

    Advanced web exploitation

    Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.

  19. Stop 15 · Red team

    Privilege escalation

    Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.

  20. Stop 16 · Red team

    Active Directory attacks

    Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.

  21. Stop 17 · Red team

    Running a red team engagement

    Offensive security: penetration testing and finding the weaknesses before attackers do. This part of the road is still being built.

  22. Stop 18 · Blue team

    Security monitoring and SIEM

    Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.

  23. Stop 19 · Blue team

    Threat hunting

    Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.

  24. Stop 20 · Blue team

    Digital forensics

    Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.

  25. Stop 21 · Blue team

    Leading incident response

    Defensive security: detecting attacks, responding to them and keeping systems safe. This part of the road is still being built.