// the roadmap

Your path to
offensive security

A clear, ordered route from your first command to full-application attacks — every module backed by hands-on labs. Start anywhere; finish everything.

Your guide through the roadmap

Completed

In Progress

Not Started

Pro

00

FOUNDATIONS

Start Here

Before you break things, understand how they work. Every exploit you will ever write is built on this layer.

How the Web Works

How Authentication Works

35 minBeginnerLAB

Browser DevTools for Hackers

APIs & Modern Web Apps

Linux & CLI Fundamentals

1 / 2

01

CROSS-SITE SCRIPTING

XSS & Client-Side Attacks

JavaScript execution in the victim's browser. From basic alert() to session hijacking, cookie theft, and full account takeover.

Cross-Site Scripting (XSS)

Stored XSS — Persistent Cross-Site Scripting

45 minIntermediate

Blind XSS — Attacking Without Feedback

40 minIntermediateLAB

XSS to Account Takeover

45 minIntermediateLAB

1 / 2

02

INJECTION ATTACKS

Injection

User input reaches an interpreter without sanitisation — SQL, OS shell, NoSQL, templates, XML. Same root cause, different damage.

50 minBeginnerLAB

NoSQL Injection

40 minIntermediateLAB

Command Injection

55 minIntermediateLAB

Server-Side Template Injection (SSTI)

45 minIntermediateLAB

XML External Entity (XXE)

40 minIntermediateLAB

03

ACCESS CONTROL

Broken Access Control

The #1 OWASP risk. Users reach data or actions they shouldn't — IDOR, privilege escalation, mass assignment, and logic flaws.

IDOR — Broken Access Control

50 minBeginnerLAB

Mass Assignment

35 minIntermediateLAB

40 minBeginnerLAB

Parameter Tampering

45 minBeginnerLAB

Business Logic Flaws

40 minIntermediateLAB

1 / 2

04

AUTHENTICATION ATTACKS

Auth & Session Security

No rate limiting, weak tokens, enumerable usernames. Attackers walk through the front door.

Broken Authentication

50 minIntermediateLAB

40 minIntermediateLAB

Session Security

40 minIntermediateLAB

2FA / MFA Bypass

35 minIntermediateLAB

Password Attacks

45 minIntermediateLAB

1 / 2

05

SERVER-SIDE VULNERABILITIES

Server-Side Attacks

Weak cryptography, request forgery, deserialization, file upload abuse, and every misconfiguration that exposes the server.

SSRF — Server-Side Request Forgery

50 minIntermediateLAB

45 minBeginnerLAB

File Upload Vulnerabilities

45 minIntermediateLAB

Deserialization Attacks

45 minIntermediateLAB

Cryptographic Failures

1 / 2

06

ADVANCED WEB

Advanced Exploitation

Beyond the basics — forged requests, prototype chains, cache poisoning, OAuth abuse, request smuggling.

CSRF — Cross-Site Request Forgery

45 minIntermediateLAB

35 minIntermediate

Prototype Pollution

45 minIntermediate

35 minIntermediate

Host Header Attacks

40 minIntermediate

1 / 3

07

RECON & TOOLING

Find What Others Miss

Asset discovery, fingerprinting, secrets in source, and the tools that make it all possible.

Recon — Asset Discovery

35 minBeginnerLAB

Recon — Content Discovery

35 minBeginnerLAB

Recon — Tech Stack Fingerprinting

30 minIntermediateLAB

Recon — Google Dorking

30 minBeginnerLAB

Recon — Shodan

35 minIntermediateLAB

1 / 3

08

AI SECURITY

Attacking AI Systems

Prompt injection, jailbreaking, and indirect manipulation of LLM-powered applications.

Prompt Injection

35 minBeginnerLAB

Indirect Prompt Injection

30 minIntermediateLAB

LLM Jailbreaking

30 minBeginnerLAB

09

PRACTICE LABS

Full Application Labs

Real applications with multiple chained vulnerabilities. No hints. Test everything you have learned.

1 / 2

10

SPECIALISE

Choose Your Career Track

Each path sequences the modules above for a specific role. Enrol in a path to get a curated order, progress tracking, and a completion certificate.

Bug Bounty Hunter

Find real vulnerabilities in production systems and get paid.

View path→

Web Penetration Tester

Conduct authorized security assessments of web applications.

View path→

AppSec Engineer

Build security in from the design phase. Threat model, audit, remediate.

View path→

Attack AI/ML systems. Prompt injection, jailbreaking, model extraction.

View path→

// NEW CONTENT ADDED REGULARLY

Browse all modules →