Learn

Take it apart to understand it.

Skill Paths

Guided routes that stack lessons and machines into a real skill.

Never touched security before. Start here and build the foundation everything else stands on, then own your first box.

Go from "what is an IP" to mapping and footholding a real box. The core loop every engagement starts with.

The web is the biggest attack surface there is. Learn how it works, then break a deliberately vulnerable app.

Most targets are Linux. Learn to read the system the way it reads itself, then escalate on a real box.

The web is the biggest attack surface there is. Go from how HTTP works to owning deliberately vulnerable apps with the OWASP Top 10.

Learn to defend. Alerts, SIEM, detection, hunting, and incident response, in the order a new analyst actually needs them.

Most targets are Linux. Get fluent with the filesystem, the shell, and scripting, then turn a foothold into root.

A shell is not the goal, root is. Master the enumeration and techniques that turn low-priv access into full control on Linux and Windows.

You cannot attack what you cannot see. Master finding hosts, ports, services, and everything an org leaks in public.

Most breaches now start in the cloud, usually a misconfiguration. Learn how cloud identity, storage, and containers get attacked and defended.