Learn Cybersecurity

Explore the basics of cyber security through 20 interactive, beginner-friendly labs. Get hands-on experience with ethical hacking, network analysis, encryption, and web security fundamentals. Perfect for complete newcomers looking to understand key cyber security concepts using industry tools like Hydra, Nmap, OpenSSL, and Wireshark.

In this course, you'll dive into the exciting world of Capture The Flag (CTF) challenges. Learn fundamental cybersecurity concepts and practical techniques through hands-on labs covering hidden files, weak passwords, open ports, misconfigurations, log analysis, directory traversal, environment variable leaks, script analysis, network exploits, and web vulnerabilities.

Learn Kali Linux through 14 guided labs and 14 matching challenges covering terminal foundations, local service discovery, HTTP and packet inspection, password tools, Metasploit, and firewall access control.

In this course, you will learn about Nmap, a powerful network scanning tool that is used to discover hosts and services on a computer network.

In this course, you will learn how to use Wireshark to capture and analyze network traffic. You will learn how to install Wireshark, capture packets, and analyze them. You will also learn how to use Wireshark to troubleshoot network issues, analyze network traffic, and secure your network.

In this course, learn the fundamentals of using Hydra, a powerful password cracking tool. Explore installation, basic commands, and attack various services like SSH, HTTP, FTP, and Telnet.

In this course, learn the fundamentals of using Hashcat, a powerful password cracking tool. Explore installation, hash types, dictionary attacks, brute-force attacks, and session management.

In this course, learn the fundamentals of using Metasploit, a powerful penetration testing framework. Explore installation, console navigation, module usage, scanning techniques, exploit execution, and post-exploitation.

In this course, learn the fundamentals of cryptography, including symmetric and asymmetric encryption, hashing, digital signatures, and key exchange protocols. Master essential cryptographic concepts and tools through hands-on practice.

Test your skills in this challenge-based course covering essential penetration testing techniques. Each challenge requires you to independently discover and exploit vulnerabilities using industry-standard tools like Nmap, FTP, SMB, Telnet, Rsync, RDP, HTTP, and SSH. Perfect your reconnaissance and enumeration skills through self-guided exploration in a safe, controlled environment.

Investigate a support website backup leak, repair public-file exposure, and independently secure a second portal while keeping legitimate downloads available.

Test customer sessions, distinguish shared invoices from private data, and retrieve a synthetic cross-account invoice through a flawed API.

Trace an API key leak, revoke the exposed credential, restore a support job with least privilege, and independently secure a shipment integration.

Close anonymous document exposure, restrict a portal identity to required reads, and independently protect a partner area without breaking public help.

Repair an unsafe product query, preserve valid punctuation, and independently protect a ready-order lookup.

Repair a password reset handler, prevent token replay and cross-account changes, and independently protect a staff portal while preserving normal recovery.

Repair a local CI job so contributor metadata stays literal while preview builds keep working.

Trace server-side image requests, restrict approved destinations, stop redirects, and preserve legitimate imports.

Restrict real Redis command and key permissions, switch a working dashboard to a dedicated account, and secure an independent order worker without breaking its monitor.

Protect container inputs, select a non-root application user, and preserve real report and invoice generation.

Diagnose and repair hostname and certificate chain failures in real Nginx sites, then restore a partner portal while preserving normal service.

Close an unintended PostgreSQL connection path at a gateway while preserving shop orders and public status.

Trace a returning process to a real cron schedule, remove its trigger, and keep legitimate status refreshes working.

Select an independently verified backup, stage a SQLite recovery, and restore real order and dispatch records while preserving unrelated uploads.

Build, tune and test Suricata HTTP rules to detect synthetic unauthorized document uploads while keeping legitimate traffic quiet.

Enforce read-only tools and per-document access using authenticated principals, real server decisions, and disclosed assistant proposal replays.