Never touched security before? Start here. Zero experience needed — every term and every step is explained.

The complete beginner starting point. No experience needed.

Find and exploit the bugs that plague real web apps.

From reconnaissance to a root shell.

Blue-team skills: detect, respond, and defend.

Sharpen the skills that win capture-the-flag events.

Go deeper on the core building blocks — networking, the web, crypto, defence and the two most common web attacks.

Attack and defend machine-learning systems and large language models — the fastest-growing security field.

Learn memory, assembly and reverse engineering the fun way — ethically, on games you own.

Job-ready red-team skills: Windows privilege escalation, Active Directory, and API/SSRF exploitation.

Secure what runs the modern internet: cloud accounts, identity, containers and Kubernetes.

Go beyond alerts: hunt with MITRE ATT&CK and analyse malware safely.

High-value specialisms that make a CV stand out: mobile, wireless, OSINT, memory forensics, secure code review and AI red-teaming.