Structured end-to-end cybersecurity training programs built around a specific career role.

Career PathBeginner

Bug Bounty Hunter

Find real vulnerabilities in production systems and get paid. From zero knowledge to submitting your first paid report on a public program.

You'll cover

1Linux & CLI Fundamentals

2How the Web Works

3How Authentication Works

4APIs & Modern Web Apps

+31 more modules

35 modules·~24h 40m

Career PathIntermediate

Web Penetration Tester

Conduct authorized security assessments of web applications. Build the methodology, tooling, and report quality expected on real client engagements.

You'll cover

1How the Web Works

2Browser DevTools for Hackers

3Burp Suite — The Hacker's Proxy

4Network Scanning with Nmap

+32 more modules

36 modules·~25h 25m

Career PathIntermediate

AI Red Teamer

Attack and probe AI/LLM systems. Find prompt injection flaws, jailbreaks, and indirect attack vectors in AI-powered products.

You'll cover

1How the Web Works

2APIs & Modern Web Apps

3Prompt Injection

4LLM Jailbreaking

+1 more modules

5 modules·~2h 55m

Focused ethical hacking sequences targeting a specific attack surface or penetration testing discipline.

Skill PathBeginner

Web Fundamentals

Understand the web before you hack it. HTTP, auth, APIs, DevTools, and the OWASP Top 10 — the foundation every attacker needs.

You'll cover

1Linux & CLI Fundamentals

2How the Web Works

3How Authentication Works

4APIs & Modern Web Apps

+4 more modules

8 modules·~4h 20m

Skill PathIntermediate

Recon & OSINT

Map the full attack surface before you fire a single request. Asset discovery, content enumeration, fingerprinting, secrets, and passive intel.

You'll cover

1Recon — Content Discovery

2Recon — Tech Stack Fingerprinting

3Recon — Asset Discovery

4Recon — Secrets & Code Recon

+5 more modules

9 modules·~5h 30m

Skill PathIntermediate

API Security

Attack the modern web. REST, GraphQL, JWT, OAuth, and mass assignment — the vulnerabilities that ship in every API.

You'll cover

1APIs & Modern Web Apps

2JWT Attacks

3JWT Attacks — Forge Your Identity

4GraphQL Attacks

+4 more modules

8 modules·~5h 25m

Skill PathIntermediate

Authentication Attacks

Break login systems end to end. Brute force, session hijacking, password reset abuse, 2FA bypass, and OAuth flaws — against real banking and social app targets.

You'll cover

1How Authentication Works

2Broken Authentication

3FirstBank — Brute Force

4FirstBank — Account Statements

+8 more modules

12 modules·~7h 20m

Skill PathIntermediate

Mastering XSS

Go beyond alert(1). Cover every XSS variant from reflected to blind, learn how attackers chain XSS into account takeovers, and understand why CSP often fails to stop it.

You'll cover

1Cross-Site Scripting (XSS)

2Stored XSS — Persistent Cross-Site Scripting

3DOM-Based XSS

4Blind XSS — Attacking Without Feedback

+4 more modules

8 modules·~6h

Skill PathIntermediate

Injection Attacks

Every way user input becomes a weapon. SQL, NoSQL, command, template, XML, and file-upload injection — from login bypass to full server compromise.

You'll cover

1SQL Injection

2sqlmap — Automated SQL Injection

3NoSQL Injection

4Command Injection

+6 more modules

10 modules·~7h 50m

Skill PathBeginner

Hacker Toolkit

Master the tools every hacker uses daily. sqlmap, ffuf, curl, and hashcat — learn them properly so they work for you, not against you.

You'll cover

1Burp Suite — The Hacker's Proxy

2curl — HTTP from the Command Line

3ffuf — Web Fuzzing

4sqlmap — Automated SQL Injection

+1 more modules

5 modules·~3h 15m

Skill PathIntermediate

Network & Systems Hacking

Go beyond web apps. Scan networks, escalate Linux privileges, crack passwords, enumerate services, exploit server misconfigurations, and analyse captured traffic.

You'll cover

1Network Scanning with Nmap

2Network Enumeration

3SSH Attacks

4SMB & Protocol Attacks

+5 more modules

9 modules·~7h 5m

Skill PathIntermediate

LLM & AI Security

Attack AI-powered products. Prompt injection, jailbreaking, and indirect attacks — the vulnerabilities that ship in every LLM integration.

You'll cover

1Prompt Injection

2LLM Jailbreaking

3Indirect Prompt Injection

3 modules·~1h 35m

Skill PathIntermediate

Business Logic & Race Conditions

Vulnerabilities that scanners never find. Abuse the application's own rules — price manipulation, workflow bypasses, race conditions, and parameter tampering.

You'll cover

1Business Logic Flaws

2Parameter Tampering

3Race Conditions

4Open Redirect

4 modules·~2h 50m

Skill PathBeginner

Password & Hash Attacks

Crack hashes, bruteforce logins, and exploit weak credential policies. From hashcat modes to Hydra one-liners — learn how attackers break authentication at the credential layer.

You'll cover

1Broken Authentication

2Password Attacks

3Hashcat — Password Cracking

4FirstBank — Brute Force

4 modules·~2h 40m

Skill PathIntermediate

Post-Exploitation & Pivoting

You're in — now what? Learn to loot a box, plant persistence, harvest credentials, and tunnel through networks to reach the next target.

You'll cover

1Shells & Reverse Shells

2Post-Exploitation Basics

3Persistence & Backdoors

4Credential Harvesting & Lateral Movement

+1 more modules

5 modules·~4h 10m