// the roadmap

Your path to
offensive security

A clear, ordered route from your first command to full-application attacks — every module backed by hands-on labs. Start anywhere; finish everything.

Your guide through the roadmap

Completed

In Progress

Not Started

Pro

00

FOUNDATIONS

Start Here

Before you break things, understand how they work. Every exploit you will ever write is built on this layer.

How the Web Works

How Authentication Works

Browser DevTools for Hackers

APIs & Modern Web Apps

Linux & CLI Fundamentals

1 / 2

01

CROSS-SITE SCRIPTING

XSS & Client-Side Attacks

JavaScript execution in the victim's browser. From basic alert() to session hijacking, cookie theft, and full account takeover.

Cross-Site Scripting (XSS)

Stored XSS — Persistent Cross-Site Scripting

45 minIntermediate

Blind XSS — Attacking Without Feedback

40 minIntermediate

XSS to Account Takeover

45 minIntermediate

1 / 2

02

INJECTION ATTACKS

Injection

User input reaches an interpreter without sanitisation — SQL, OS shell, NoSQL, templates, XML. Same root cause, different damage.

NoSQL Injection

40 minIntermediate

Command Injection

55 minIntermediate

Server-Side Template Injection (SSTI)

45 minIntermediate

XML External Entity (XXE)

40 minIntermediate

03

ACCESS CONTROL

Broken Access Control

The #1 OWASP risk. Users reach data or actions they shouldn't — IDOR, privilege escalation, mass assignment, and logic flaws.

IDOR — Broken Access Control

Mass Assignment

35 minIntermediate

Parameter Tampering

Business Logic Flaws

40 minIntermediate

1 / 2

04

AUTHENTICATION ATTACKS

Auth & Session Security

No rate limiting, weak tokens, enumerable usernames. Attackers walk through the front door.

Broken Authentication

50 minIntermediate

40 minIntermediate

Session Security

40 minIntermediate

2FA / MFA Bypass

35 minIntermediate

Password Attacks

45 minIntermediate

1 / 2

05

SERVER-SIDE VULNERABILITIES

Server-Side Attacks

Weak cryptography, request forgery, deserialization, file upload abuse, and every misconfiguration that exposes the server.

SSRF — Server-Side Request Forgery

50 minIntermediate

File Upload Vulnerabilities

45 minIntermediate

Deserialization Attacks

45 minIntermediate

Cryptographic Failures

1 / 2

06

ADVANCED WEB

Advanced Exploitation

Beyond the basics — forged requests, prototype chains, cache poisoning, OAuth abuse, request smuggling.

CSRF — Cross-Site Request Forgery

45 minIntermediate

35 minIntermediate

Prototype Pollution

45 minIntermediate

35 minIntermediate

Host Header Attacks

40 minIntermediate

1 / 3

07

RECON & TOOLING

Find What Others Miss

Asset discovery, fingerprinting, secrets in source, and the tools that make it all possible.

Recon — Asset Discovery

Recon — Content Discovery

Recon — Tech Stack Fingerprinting

30 minIntermediate

Recon — Google Dorking

Recon — Shodan

35 minIntermediate

1 / 3

08

AI SECURITY

Attacking AI Systems

Prompt injection, jailbreaking, and indirect manipulation of LLM-powered applications.

Prompt Injection

Indirect Prompt Injection

30 minIntermediate

LLM Jailbreaking

10

SPECIALISE

Choose Your Career Track

Each path sequences the modules above for a specific role. Enrol in a path to get a curated order, progress tracking, and a completion certificate.

Bug Bounty Hunter

Find real vulnerabilities in production systems and get paid.

View path→

Web Penetration Tester

Conduct authorized security assessments of web applications.

View path→

AppSec Engineer

Build security in from the design phase. Threat model, audit, remediate.

View path→

Attack AI/ML systems. Prompt injection, jailbreaking, model extraction.

View path→

// NEW CONTENT ADDED REGULARLY

Browse all modules →