Learning Paths

Start from zero. Build your Linux, networking, and Python foundations, then launch your first real attacks. No experience needed — just a terminal and determination.

From HTTP basics to advanced exploitation. Master every OWASP vulnerability, Burp Suite, API attacks, JWT/OAuth, SSRF, SSTI, and modern web exploitation techniques.

Own Windows networks end-to-end. Active Directory enumeration, Kerberos attacks, lateral movement, domain dominance, and full red team operations.

Build the skills defenders actually need. SOC operations, SIEM analysis, threat hunting, incident response, digital forensics, and malware analysis.

Deep binary exploitation from stack overflows to heap spray. Windows SEH, ROP chains, shellcode development, 0-day research methodology, and full exploit chains.

Attack and defend Wi-Fi and radio: WPA handshakes, deauthentication, rogue access points, and RF reconnaissance.

Assess Android and iOS applications: static and dynamic analysis, traffic interception, and mobile-specific attack surface.

Attack and harden cloud environments and containers: IAM misconfigurations, storage exposure, and Docker/Kubernetes security.

CCNA-aligned networking foundations: the OSI model, addressing, subnetting, routing, and packet analysis.

Red-team machine-learning systems: prompt injection, model extraction, and the security of LLM-powered applications.

Reverse-engineer and manipulate games: memory editing, anti-cheat evasion, and the exploitation techniques that carry over to binaries.

Learn to code from zero — Python, JavaScript, HTML/CSS, SQL, Java, and C++ — the groundwork every other track builds on.

Cross-cutting material that doesn't sit inside a single track.

Curated, sequenced study tracks that string labs and workbooks into a start-to-finish path.