⚠️ Authorized practice only. Every technique here is for use inside isolated environments, or on systems you own or are explicitly authorized to test.

Curriculum

Phase 1 · Fundamentals

Networking, Linux, scripting, web basics.

Networking Fundamentals Beginner

TCP/IP, the OSI model, ports and protocols — the bedrock of everything.

OSI & TCP/IP Modelstheory Ports & Protocolstheory Quiz: Networkingquiz Challenge: Find the Servicechallenge

Linux Fundamentals Beginner

Shell, filesystem, permissions — a hacker's home turf.

Shell & Filesystemtheory Permissions & sudotheory Challenge: Hidden in Plain Sightchallenge

Web Basics Beginner

HTTP, headers, cookies — the vocabulary of web security.

Anatomy of an HTTP Requesttheory Cookies, Sessions & Headerstheory Quiz: Webquiz Challenge: Header Huntchallenge

Phase 4 · Advanced

Active Directory ranges, evasion, reporting.

Active Directory Range Expert

A multi-host isolated network: domain controller, workstation, attacker box.

Enumeration & Lateral Movementtheory Challenge: Methodologychallenge

Phase 5 · AI Security new

LLM attack surface, prompt injection, agency.

LLM Attack Surface Intermediate

Why prompts can't be parameterised, and where the real risk lives.

The LLM Attack Surfacetheory Prompt Injection in Depththeory Challenge: Severity Reasoningchallenge

Insecure Output Handling Advanced

Model output is untrusted input. Match the sink to the classic bug class.

Output Handling & Excessive Agencytheory Challenge: Name the Sinkchallenge

Phase 6 · Blue Team new

Log analysis, detection engineering, DFIR.

Log Analysis Beginner

Frequency, pattern and pacing — turning a wall of text into a finding.

Log Analysis Fundamentalstheory Challenge: Spot the Beaconchallenge

Detection Engineering Intermediate

Rules that survive tool churn: behaviour over indicators.

Detection Engineeringtheory Challenge: Pyramid of Painchallenge

Incident Response & DFIR Intermediate

Order of volatility, containment trade-offs, defensible timelines.

IR & DFIR Triagetheory Challenge: Order of Volatilitychallenge