May 31, 2026, 11:06 PM
Offensive Security Junior course free for limited time only.
https://www.linkedin.com/posts/hernanrod...66976-Rnif
Certified Offensive Windows API (COWA) exam free for limited time only.
https://www.linkedin.com/posts/jose-prav...67552-tJ0S
Uncle Rat's Ultimate Bug Bounty Guide - Part 1 - Main App Hacking Introduction [2025] course free for limited time only.
https://www.linkedin.com/posts/jose-prav...59168-KVYF
Some more Cybersecurity Resources:
#Red_Team_Tactics
Payloads for AI Red Teaming and beyond
https://github.com/joey-melo/payloads
Abusing Windows, .NET Quirks and Unicode Normalization to Exploit DotNetNuke
https://slcyber.io/assetnote-security-re...dotnetnuke
Leaking IPs in Brave Tor Window & Chrome VPNs + Popunders + CSP Bypass
https://0x999.net/blog/leaking-ips-in-br...csp-bypass
Bypassing Google Cloud Build Comment Control
https://adnanthekhan.com/posts/cloud-build-toctou
Exploiting Self-XSS Using Disk Cache
https://mey-d.github.io/posts/self-xss-disk-cache
Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection
https://embracethered.com/blog/posts/202...filtration
https://greydynamics.com/a-guide-to-sign...ce-sigint/
today only, learn at no-cost.
PHP REST API cybersecurity
https://www.udemy.com/course/php-rest-ap...RSECURITY1
Good website to learn Git
https://www.gitmastery.me/
https://arcx.io/courses
https://notes.piratemoo.com/mobiles
https://infosec.house/
https://www.coursera.org/professional-ce...urce-tools
Check out a websites tech stack https://www.wappalyzer.com/
https://www.hackerone.com/
Vulnerability dictionary https://attack.mitre.org/
self explanatory https://intelligence.any.run/
https://cve.org/
https://www.hackthebox.com/
URL Scanner https://urlscan.io/
Self explanatory https://default-password.info/
JWT token generator and decryptor https://www.jwt.io/
JSON Web Tokens - jwt.io
amazing reverse shell generator https://www.revshells.com/
Open Source Intelligence & Forensic Tools https://intelx.io/
Awesome plugin for your browser for quick reference https://hacktools.sh/
Monster OSINT tool: https://www.shodan.io/
UNIx Binary List to bypass local security restrictions: educational Purposes only https://gtfobins.github.io/
Look into past deployments to inspect forgotten weaknesses https://web.archive.org/
AGAIN these are for educational purposes
Web based subdomain finder https://subdomainfinder.c99.nl/
https://github.com/collections/ctf-cybersec-resources
https://github.com/vxunderground
https://takeitdown.ncmec.org/
https://www.missingkids.org/home
https://www.malwarebytes.com/?gad_source...2084817519
vpn
https://mullvad.net/en paid vpn
https://protonvpn.com/?srsltid=AfmBOor4a...LPLp5m45_k free vpn
free emails
https://pissmail.com/login.php ip limiteded
https://services.autistici.org/new-request/stage1 this one takes a lil more effort
https://proton.me/mail
password manger legit the only one you need https://proton.me/pass
https://www.netacad.com/
https://skillsbuild.org/
https://alison.com/
(Free certs!)
https://www.osinttechniques.com/osint-tools.html
Resource about SQLi https://medium.com/@chalkche/sqli-guide-...ee21ba2dde
https://use-their-id.com/
https://linuxjourney.com/
good to learn linux and its free
https://hackers-arise.com/reverse-engine...bg-basics/
https://malwareunicorn.org/workshops/re101.html#0
https://intezer.com/blog/malware-reverse...beginners/
https://reshax.com/topic/47-reverse-engi...ollection/
https://forum.tuts4you.com/files/file/13...r-newbies/
https://malwareunicorn.org/workshops/re101.html#2
https://p.ost2.fyi/courses/course-v1:Ope...sm+2021_v1
https://0xinfection.github.io/reversing
https://github.com/mikesiko/PracticalMal...lysis-Labs - its book is: https://www.amazon.com/Practical-Malware...1593272901, well it is malware too not RE
https://www.youtube.com/playlist?list=PL...6PjamaY6JO
https://github.com/MalwareTech/Beginner-...Challenges - pass: MalwareTech
https://www.amazon.com/Practical-Reverse...1118787315 - needs experience - do not start with it
https://www.youtube.com/watch?v=ws7FZNEM...HMpnr0rOdh
https://www.youtube.com/watch?v=BRZq5EVQ...EPzkA3nPdL
https://www.youtube.com/playlist?list=PL...aOaSfZqHJc
https://www.youtube.com/playlist?list=PL...NW_6H9w-wC
https://www.youtube.com/playlist?list=PL...0mtAZ6xg5N - malware and re
**Best Binary Exploitation **
https://malwareunicorn.org/#/
https://www.youtube.com/watch?v=wa3sMSdL...fZbxDPec94
https://www.sans.org/cyber-security-cour...-analysis/
https://exploit.education/
https://www.youtube.com/watch?v=FB_e1mIhykk
https://www.youtube.com/watch?v=yQ8Sg_Dcg1E
https://www.youtube.com/watch?v=fIuGg3rvnzM
https://youtu.be/fIuGg3rvnzM
https://github.com/horsicq/Detect-It-Easy
https://www.hexacorn.com/blog/2023/04/21...t-it-easy/
https://malware.tech/posts/intro-to-die-script/
-
https://class.malware.re/
https://p.ost2.fyi/courses/course-v1:Ope...1_v1/about
https://github.com/0xZ0F/Z0FCourse_ReverseEngineering
https://github.com/ReversingID/Awesome-Reversing
https://github.com/tylerha97/awesome-reversing
https://guyinatuxedo.github.io/
https://0xresetti.github.io/reversing.html
https://malwareunicorn.org/workshops/re101.html#0
https://repo.zenk-security.com/Reversing...(2005).pdf
https://www.pentesteracademy.com/course?id=3
https://www.eccouncil.org/cybersecurity-...gineering/
https://steakenthusiast.github.io/categories/
https://www.varonis.com/blog/how-to-use-ghidra
https://www.youtube.com/watch?v=2kQmx2YYlDw
https://github.com/jtesta/ssh-audit
SSH Audit tool for your own boxes
https://app.geospy.ai/
https://start.me/p/rx6Qj8/nixintel-s-osi...ource-list
https://findxss.com/
https://buildcyber.ai/
free Videos from hack space con/ hack red con
https://roadmap.sh/
A good roadmap for IT people
https://en.fofa.info/
https://www.isc2.org/certifications/cc
ISC2's CC exam and training are currently free
https://pwn.college/
https://www.netacad.com/
https://overthewire.org/wargames/bandit/bandit0.html
https://pentesterlab.com/
https://portswigger.net/web-security
https://overthewire.org/wargames/
https://hackviser.com/tactics/tools
https://github.com/ossu/computer-science
https://github.com/ossu/computer-science
https://www.vulnhub.com/
https://www.root-me.org/
https://www.hackthissite.org/
https://www.cyberseclabs.co.uk/
https://pentesterlab.com/exercises
https://cuckooseggblog.com/challen
Learning Platforms & Courses
Chainshot (by Alchemy) – Interactive coding courses for smart contract security.
https://www.chainshot.com/
Secureum – Bootcamps and audit competitions for Ethereum smart contract security.
https://secureum.substack.com/
Ethernaut (by OpenZeppelin) – CTF-style game to exploit smart contracts and learn security.
https://ethernaut.openzeppelin.com/
Damn Vulnerable DeFi – A DeFi security wargame that teaches exploitation techniques.
https://www.damnvulnerabledefi.xyz/
Hack The Box Web3 Labs – New Web3 labs have been introduced on HTB for hands-on security challenges.
https://www.hackthebox.com/
Top cyber APIs
Shodan
Google safe browsing
PhishTank
VirusTotal
GreyNoise
RiskIQ / PassiveTotal
URLScan
AlienVault Open Threat Exchange
SecurityTrails
IPinfo
WhoisXMLAPI
Spamhaus
mnemonic
ThreatFox (from abuse.ch)
Free/Open Source API Security Tools
42Crunch: Free OpenAPI Editor and limited free (freemium) API Audit and Scan tools
Swagger UI: Free, open-source API documentation and testing tool
SoapUI: Free, open-source version for API functional and security testing
Akto: Open-source DAST and API security tool for automated discovery and vulnerability scanning
Arachni: Free for most use cases, including scanning open source projects
StackHawk: Free for open source projects and single application use
Gosec: Free static analysis for Go code, including API security checks
WuppieFuzz: Free, open-source REST API fuzzer
MISP: Open-source threat intelligence platform with API integration
Other Notable Free/Open Source Platforms
OpenVAS: Open-source vulnerability scanner (API available).
Censys: Free tier for internet-wide asset discovery and search.
TheHive, OpenCTI: Free, open-source threat intelligence and incident response platforms
this list was taken from
https://upskilld.com/article/free-cybersecurity-apis/
https://www.jit.io/resources/appsec-tool...rity-tools
https://owasp.org/www-community/Free_for...rity_Tools
https://www.recordedfuture.com/threat-in...-platforms
Azure Networking services for beginners
Code: AZURE-NET-0503 however link auto makes it free
https://www.udemy.com/course/azure-networking-services/
£264.94 worth of content, 54 hours 27 minutes total
Introduction To Bug Bounties - Main Web App Hacking
Code: 3D519E172B439CE2E1F9 however link auto makes it free
https://www.udemy.com/course/uncle-rats-...rt-1-2025/
[NEW - 2025] AWS Cost Optimizations MasterClass
Code: 8127D90BFBCC2950FB57 however link auto makes it free
https://www.udemy.com/course/aws-cost-op...sterclass/
----------------------------------------
Google NotebookLM
Code: MAYFREELEARNING however link auto makes it free
https://www.udemy.com/course/google-notebooklm-sta/
----------------------------------------
Pentesting 101: The Ultimate Hacking Guide Start To Finish
Code: AAD03C9F23A74EB79AA6 however link auto makes it free
https://www.udemy.com/course/pentesting-...ate-guide/
----------------------------------------
The Ultimate BAC and IDOR guide for Ethical Hacking
Code: F073E68065CC0F01DDAA however link auto makes it free
https://www.udemy.com/course/the-ultimat...l-hacking/
----------------------------------------
Uncle Rat's Ultimate Broad Scope And API Hacking guide
Code: 96886F7E3356233AC5BE however link auto makes it free
https://www.udemy.com/course/uncle-rats-...ing-guide/
├── Penetration Testing
│ ├── Reconnaissance: OSINT, DNS Recon
│ ├── Scanning: Nmap, Nessus
│ │ ├── Port Scanning, OS Detection
│ │ ├── Vulnerability Prioritization
│ ├── Exploitation: Metasploit, Custom Payloads
│ │ ├── Shellcode, ROP
│ │ ├── Fuzzing, Mitigation Bypass
│ ├── Post-Exploitation: Privilege Escalation
│ │ ├── Persistence, Data Exfiltration
│ ├── Reporting: Documentation, Recommendations
3. Advanced Topics
├── Offensive Security
│ ├── Exploit Development
│ ├── Advanced Persistent Threats (APTs)
│ ├── Red Team Operations
├── Security Operations Center (SOC)
│ ├── Monitoring, Incident Response
│ ├── SIEM Configuration
│ ├── Threat Intelligence
├── Digital Forensics
│ ├── Data Acquisition
│ ├── Evidence Preservation
│ ├── Analysis & Reporting
├── Compliance & Governance
├── GDPR, HIPAA
├── Risk Management
├── Policy Development
4. Emerging Technologies & Trends
├── Cloud Security
│ ├── Cloud Service Models (IaaS, PaaS, SaaS)
│ ├── Cloud Security Posture Management (CSPM)
│ ├── Cloud Access Security Brokers (CASB)
│ ├── Data Encryption in the Cloud
│ ├── Identity and Access Management (IAM)
│ ├── Cloud Security Best Practices
├── Zero Trust Architecture
│ ├── Principles of Zero Trust
│ ├── Identity and Device Authentication
│ ├── Network Segmentation
│ ├── Microsegmentation
│ ├── Policy Enforcement
├── Internet of Things (IoT)
│ ├── IoT Security Challenges
│ ├── Device Authentication & Encryption
│ ├── IoT Network Segmentation
├── Operating Systems
│ ├── Windows
│ │ ├── Registry, AD, GPO
│ │ ├── Event Logs
│ ├── Linux
│ │ ├── Filesystem, Permissions
│ │ ├── Systemd, Log Management
│ ├── MacOS
│ │ ├── SIP, Keychain Access
│ │ ├── Daemons, Gatekeeper
│ ├── Kernel Exploits
│ │ ├── Privilege Escalation, CVE
│ │ ├── Debugging, Exploit Dev
│ ├── Shell Scripting
│ ├── Bash, PowerShell
│ ├── Automation, Scheduling
├── Programming & Scripting
│ ├── Python
│ │ ├── Networking, Automation
│ │ ├── API, Pentesting
│ │ ├── Data Analysis
│ ├── Bash
│ │ ├── CLI Fu, Text Manipulation
│ │ ├── Network Config, Process Management
│ ├── PowerShell
│ │ ├── Cmdlets, Remoting
│ │ ├── Execution Policies, Admin Tasks
│ ├── C/C++
│ │ ├── Memory Management, Buffer Overflows
│ │ ├── Pointer Manipulation, Exploits
│ ├── Assembly Language
│ ├── x86/x64, Shellcode Dev
│ ├── Debugging, Reverse Engineering
│ ├── Reverse Engineering
│ ├── Disassembly, Decompilation
│ ├── Binary Patching, Malware Analysis
2. Intermediate Security Skills
├── Threat Modeling
│ ├── STRIDE: Spoofing, Tampering, etc.
│ ├── DREAD: Damage, Reproducibility, etc.
│ ├── MITRE ATT&CK: Tactics, Techniques
1. Basics
├── Networking
│ ├── OSI Model
│ │ ├── Layers 1-7, Functions
│ │ ├── Encapsulation/Decapsulation
│ ├── TCP/IP Suite
│ │ ├── IPv4/IPv6, TCP/UDP
│ │ ├── Protocol Ports, ICMP, ARP
│ ├── Subnetting
│ │ ├── CIDR, VLSM, Calculations
│ │ ├── Supernetting
│ ├── NAT/PAT
│ │ ├── Types, Mechanisms
│ │ ├── NAT Traversal
│ ├── DNS
│ │ ├── Resolution, DNSSEC
│ │ ├── Spoofing, Tunneling
│ ├── VPNs
│ │ ├── IPSec, SSL/TLS
│ │ ├── Split Tunneling
│ ├── Firewalls
│ │ ├── Stateful vs Stateless
│ │ ├── NGFW, Rule Creation
│ ├── Load Balancers
│ ├── Layer 4/7, Health Checks
│ ├── Algorithms, Session Persistence
# Beginner roadmap for Red Team
> Networking Fundamentals
├── TCP/IP Model
│ ├── Layers
│ ├── Protocols
│ └── Data Flow
├── Subnet Masking
│ ├── Network Addresses
│ ├── Subnet Masks
│ └── Broadcast Addresses
├── IP Routing
│ ├── Routing Protocols
│ │ ├── RIP
│ │ ├── OSPF
│ │ └── BGP
│ └── Packet Forwarding
└── Network Devices
├── Routers
├── Switches
└── Firewalls
> Operating Systems
├── Linux
│ ├── Command-Line Interface
│ ├── File Systems
│ ├── Processes
│ └── System Administration
├── Windows
│ ├── Registry
│ ├── File Systems
│ ├── Services
│ └── User Management
└── macOS
├── Architecture
└── Command-Line Tools
> Programming
├── Python
│ ├── Data Structures and DBMS
│ ├── Control Flow
│ └── Libraries
│ ├── Scapy
│ └── BeautifulSoup
├── Bash
│ └── Shell Scripting
└── C/C++ (Optional)
└── Exploitation and Malware Development
> Cybersecurity Basics
├── Threat Landscape
│ ├── Malware
│ ├── Phishing
│ └── DDoS
├── Vulnerability Types
│ ├── SQL Injection
│ ├── XSS
│ └── Buffer Overflows
└── Security Controls
├── Firewalls
├── Intrusion Detection Systems
└── Antivirus
└── Visualization
https://class.malware.re/
https://p.ost2.fyi/courses/course-v1:Ope...1_v1/about
https://github.com/0xZ0F/Z0FCourse_ReverseEngineering
https://github.com/ReversingID/Awesome-Reversing
https://github.com/tylerha97/awesome-reversing
https://guyinatuxedo.github.io/
https://0xresetti.github.io/reversing.html
https://malwareunicorn.org/workshops/re101.html#0
https://repo.zenk-security.com/Reversing...(2005).pdf
https://www.pentesteracademy.com/course?id=3
Building a FullStack AI SaaS Web App on AWS and Vercel
https://www.udemy.com/course/building-a-...nd-vercel/
Code: ECD9915FF6663D2E0A9F however it auto applies it when u click link
-------------------------------------------------
Learning AWS CDK by Building Event-Driven Architecture App
https://www.udemy.com/course/learning-aw...cture-app/
Code: 668E2B7D148FB00FE9B1 however it auto applies it when u click link
-------------------------------------------------
Create a FullStack App with AWS API Gateway and AWS AppSync
https://www.udemy.com/course/create-a-fu...s-appsync/
Code: 0C4F5B7335F5F1055477 however it auto applies it when u click link
-------------------------------------------------
AWS Bedrock : Quick Guide for Busy Professionals
https://www.udemy.com/course/aws-bedrock...essionals/
Code: D8F60422D1456E8FE255 however it auto applies it when u click link
-------------------------------------------------
Mastering API Management for Generative AI in Azure
https://www.udemy.com/course/azure-api-m...rative-ai/
Code: AZURE-APIM-0319 however it auto applies it when u click link
-------------------------------------------------
RAG in Azure with OpenAI and ChatGPT LLM model
https://www.udemy.com/course/rag-azure/
Code: AZURE-RAG-0319 however it auto applies it when u click link
£164.94 worth of free content, 15hrs 51mins total
More Free Courses
CISSP-Important Recap Before Exam | Domain 1-2
https://www.udemy.com/course/cissp-impor...2-updated/
Code: CISSPRAMADAMDEAL however it auto applies when u click link
-------------------------------------------------
CISSP-Important Recap Before Exam | Domain 3-4-5
https://www.udemy.com/course/cissp-impor...5-updated/
Code: CISSPRAMADAMDEAL however it auto applies when u click link
-------------------------------------------------
CISSP-Important Recap Before Exam | Domain 6-7-8
https://www.udemy.com/course/cissp-impor...8-updated/
Code: CISSPRAMADAMDEAL however it auto applies when u click link
£139.97 worth of free content, 7hrs 6mins total
MASSIVE free courses for today🔥
Deploy Infra in the Cloud using Terraform. 9hrs
https://www.udemy.com/course/deploy-infr...terraform/
Code: TERRAFORM-IAC-0323 however it auto applies when u click link
-------------------------------------------------
Learn Azure DevOps CI/CD pipelines 14hrs
https://www.udemy.com/course/azure-devop...pipelines/
Code: AZURE-DEVOPS-0323 however it auto applies when u click link
-------------------------------------------------
Python For Data Science In 2025 A-Z: EDA With Real Exercises 15hrs 45mins
https://www.udemy.com/course/data-analys...-tutorial/
Code: 53B051EC52F8EDC3ADD5 however it auto applies when u click link
-------------------------------------------------
100 Days of Code: A Challenging Complete Python Pro Bootcamp 29hrs 3mins
https://www.udemy.com/course/excellent-p...p-in-2023/
Code: E42B22668C7885C0C84A however it auto applies when u click link
-------------------------------------------------
Master Cisco CCNA 200-301: Comprehensive All-in-One Course 50hrs
https://www.udemy.com/course/ccna-jitl/
Code: JITL2025-1 to get it free (this one is CISCO certified)
.
🦉 **OWLSEC CYBERSECURITY CERTIFICATION GUIDE** 🦉
This roadmap is designed to help you navigate the sea of certifications. Whether you're just starting out or looking to master your craft, here is the path forward:
---
🛡️ **BLUE TEAM (Defensive Security)**
*Focus: Defense, Incident Response, Forensics, and Analysis*
🟢 **Beginner**
> • [**Security+**](<https://www.comptia.org/certifications/security>) (CompTIA) - Paid
> • [**BTL1**](<https://www.securityblue.team/certifications/blue-team-level-1>) (Blue Team Level 1) - Paid
> • [**CSA**](<https://www.eccouncil.org/programs/certified-soc-analyst-csa/>) (Certified Security Analyst) - Paid
> • [**eCDFP**](<https://ine.com/security/certifications/ecdfp-certification>) (Certified Digital Forensics Professional) - Paid
🟡 **Intermediate**
> • [**CySA+**](<https://www.comptia.org/certifications/cybersecurity-analyst>) (CompTIA) - Paid
> • [**CDSA**](<https://academy.hackthebox.com/preview/certifications/htb-certified-defensive-security-analyst>) (Certified Defensive Security Analyst) - Paid
> • [**BTL2**](<https://www.securityblue.team/certifications/blue-team-level-2>) (Blue Team Level 2) - Paid
> • [**CCD**](<https://cyberdefenders.org/certified-cyberdefender-certification/>) (Certified Cloud Defender) - Paid
> • [**OSDA**](<https://www.offsec.com/courses/soc-200/>) (Offensive Security Defensive Analyst) - Paid
> • [**eCTHP**](<https://ine.com/security/certifications/ecthp-certification>) (Certified Threat Hunting Professional) - Paid
> • [**GCIH**](<https://www.giac.org/certification/certified-incident-handler-gcih>) (GIAC Certified Incident Handler) - Paid
> • [**eCIR**](<https://ine.com/security/certifications/ecir-certification>) (Certified Incident Responder) - Paid
🔴 **Advanced**
> • [**CASP+**](<https://www.comptia.org/certifications/comptia-advanced-security-practitioner>) (CompTIA) - Paid
> • [**GCFA**](<https://www.giac.org/certification/certified-forensic-analyst-gcfa>) (GIAC Certified Forensic Analyst) - Paid
⚔️ **RED TEAM (Offensive Security)**
*Focus: Pentesting, Bug Bounty, Exploit Dev, and Red Teaming*
⚪ **Novice**
> • [**KLCP**](<https://www.offsec.com/courses/pen-103/>) (Kali Linux Certified Professional) - Paid
🟢 **Beginner**
> • [**eJPT**](<https://ine.com/security/certifications/ejpt-certification>) (Junior Penetration Tester) - Paid
> • [**PNPT**](<https://tcm-sec.com/pnpt/>) (Practical Network Penetration Tester) - Paid
> • [**CRTP**](<https://www.alteredsecurity.com/redteamlab>) (Certified Red Team Professional) - Paid
> • [**CEH**](<https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/>) (Certified Ethical Hacker) - Paid
🟡 **Intermediate**
> • [**CPTS**](<https://academy.hackthebox.com/preview/certifications/htb-certified-penetration-testing-specialist>) (Certified Penetration Testing Specialist) - Paid
> • [**CRTO**](<https://training.zeropointsecurity.co.uk/courses/red-team-ops>) (Certified Red Team Operator) - Paid
> • [**OSCP**](<https://www.offsec.com/courses/pen-200/>) (OffSec Certified Professional) - Paid
> • [**CBBH**](<https://academy.hackthebox.com/preview/certifications/htb-certified-bug-bounty-hunter>) (Certified Bug Bounty Hunter) - Paid
> • [**OSWP**](<https://www.offsec.com/courses/pen-210/>) (Offensive Security Wireless Professional) - Paid
> • [**eWPT**](<https://ine.com/security/certifications/ewpt-certification>) (Web Penetration Tester) - Paid
🔴 **Advanced**
> • [**CRTO II**](<https://training.zeropointsecurity.co.uk/courses/red-team-ops-ii>) (Certified Red Team Operator II) - Paid
> • [**OSWA**](<https://www.offsec.com/courses/web-200/>) (Offensive Security Web Assessor) - Paid
> • [**OSWE**](<https://www.offsec.com/courses/web-300/>) (Offensive Security Web Expert) - Paid
> • [**OSEP**](<https://www.offsec.com/courses/pen-300/>) (Offensive Security Experienced Penetration Tester) - Paid
> • [**CWEE**](<https://academy.hackthebox.com/preview/certifications/htb-certified-web-exploitation-expert>) (Certified Web Exploitation Expert) - Paid
> • [**CAPE**](<https://academy.hackthebox.com/preview/certifications/htb-certified-active-directory-pentesting-expert>) (Certified Adversary Emulation Professional) - Paid
⚫ **Expert / Specialization**
> • [**OSCE3**](<https://www.offsec.com/offsec-certified-expert-3-osce3/>) (Offensive Security Certified Expert 3) - Paid
> • [**OSMR**](<https://www.offsec.com/courses/exp-312/>) (Offensive Security Malware Researcher) - Paid
> • [**OSED**](<https://www.offsec.com/courses/exp-301/>) (Offensive Security Exploit Developer) - Paid
## 🎥 Cybersecurity Starter Videos – Quick Guide
1. HTB: [Getting Started with HTB Academy](https://www.youtube.com/watch?v=Y4vv5sjNo0Y)
3. HackerXSploit: [HackerXSploit Resources](https://hackersploit.org/), Youtube: [Hackersploit](https://www.youtube.com/@hackersploit)
4. John Hammond: [Youtube](https://www.youtube.com/@_JohnHammond)
5. Ideas on avenues of approach. Jack Rhysider: [DarkNet Diaries](https://www.youtube.com/@JackRhysider)
## 🔴 Red Team (Attacking) Path
### Start Here
• THM: [Pre Security Path](https://tryhackme.com/path/outline/presecurity)
### Learn Tools & Basics
• HTB: [Linux Fundamentals](https://academy.hackthebox.com/module/details/18)
• THM: Windows Fundamentals 1 - 3
1. [Windows Fundamentals 1](https://tryhackme.com/room/windowsfundamentals1xbx)
2. [Windows Fundamentals 2](https://tryhackme.com/room/windowsfundamentals2x0x)
3. [Windows Fundamentals 3](https://tryhackme.com/room/windowsfundamentals3xzx)
### Know the Systems
• HTB: [Linux Fundamentals](https://academy.hackthebox.com/module/details/18)
• HTB: [Intro to Networking](https://academy.hackthebox.com/module/details/34)
### Get Offensive (Practice Real Attacks)
• HTB Academy: [Academy](https://academy.hackthebox.com/)
• HTB: “Starting Point” Machines
• THM Jr Penetration Tester: [JrPentester](https://tryhackme.com/path/outline/jrpenetrationtester)
• VulnHub: [Vulnhub Labs](https://www.vulnhub.com/)
## 🔵 Blue Team (Defending) Path
### Start Here
• THM: [Pre Security](https://tryhackme.com/path/outline/presecurity)
• THM: [Cyber Defense 101](https://tryhackme.com/path/outline/cybersecurity101)
• CyberDefense: [Network Security](https://cyberdefenders.org/blueteam-ctf-...-forensics)
### Know the Systems
• THM: Windows Fundamentals 1 - 3
1. [Windows Fundamentals 1](https://tryhackme.com/room/windowsfundamentals1xbx)
2. [Windows Fundamentals 2](https://tryhackme.com/room/windowsfundamentals2x0x)
3. [Windows Fundamentals 3](https://tryhackme.com/room/windowsfundamentals3xzx)
• HTB: [Linux Fundamentals](https://academy.hackthebox.com/module/details/18)
• HTB: [Intro to Networking](https://academy.hackthebox.com/module/details/34)
### Detect & Analyze
• HTB Academy: [SOC Level 1](https://tryhackme.com/path/outline/soclevel1)
• CyberDefenders [Network Security](https://cyberdefenders.org/blueteam-ctf-...-forensics)
https://www.linkedin.com/posts/hernanrod...66976-Rnif
Certified Offensive Windows API (COWA) exam free for limited time only.
https://www.linkedin.com/posts/jose-prav...67552-tJ0S
Uncle Rat's Ultimate Bug Bounty Guide - Part 1 - Main App Hacking Introduction [2025] course free for limited time only.
https://www.linkedin.com/posts/jose-prav...59168-KVYF
Some more Cybersecurity Resources:
#Red_Team_Tactics
Payloads for AI Red Teaming and beyond
https://github.com/joey-melo/payloads
Abusing Windows, .NET Quirks and Unicode Normalization to Exploit DotNetNuke
https://slcyber.io/assetnote-security-re...dotnetnuke
Leaking IPs in Brave Tor Window & Chrome VPNs + Popunders + CSP Bypass
https://0x999.net/blog/leaking-ips-in-br...csp-bypass
Bypassing Google Cloud Build Comment Control
https://adnanthekhan.com/posts/cloud-build-toctou
Exploiting Self-XSS Using Disk Cache
https://mey-d.github.io/posts/self-xss-disk-cache
Exfiltrating Your ChatGPT Chat History and Memories With Prompt Injection
https://embracethered.com/blog/posts/202...filtration
https://greydynamics.com/a-guide-to-sign...ce-sigint/
today only, learn at no-cost.
PHP REST API cybersecurity
https://www.udemy.com/course/php-rest-ap...RSECURITY1
Good website to learn Git
https://www.gitmastery.me/
https://arcx.io/courses
https://notes.piratemoo.com/mobiles
https://infosec.house/
https://www.coursera.org/professional-ce...urce-tools
Check out a websites tech stack https://www.wappalyzer.com/
https://www.hackerone.com/
Vulnerability dictionary https://attack.mitre.org/
self explanatory https://intelligence.any.run/
https://cve.org/
https://www.hackthebox.com/
URL Scanner https://urlscan.io/
Self explanatory https://default-password.info/
JWT token generator and decryptor https://www.jwt.io/
JSON Web Tokens - jwt.io
amazing reverse shell generator https://www.revshells.com/
Open Source Intelligence & Forensic Tools https://intelx.io/
Awesome plugin for your browser for quick reference https://hacktools.sh/
Monster OSINT tool: https://www.shodan.io/
UNIx Binary List to bypass local security restrictions: educational Purposes only https://gtfobins.github.io/
Look into past deployments to inspect forgotten weaknesses https://web.archive.org/
AGAIN these are for educational purposes
Web based subdomain finder https://subdomainfinder.c99.nl/
https://github.com/collections/ctf-cybersec-resources
https://github.com/vxunderground
https://takeitdown.ncmec.org/
https://www.missingkids.org/home
https://www.malwarebytes.com/?gad_source...2084817519
vpn
https://mullvad.net/en paid vpn
https://protonvpn.com/?srsltid=AfmBOor4a...LPLp5m45_k free vpn
free emails
https://pissmail.com/login.php ip limiteded
https://services.autistici.org/new-request/stage1 this one takes a lil more effort
https://proton.me/mail
password manger legit the only one you need https://proton.me/pass
https://www.netacad.com/
https://skillsbuild.org/
https://alison.com/
(Free certs!)
https://www.osinttechniques.com/osint-tools.html
Resource about SQLi https://medium.com/@chalkche/sqli-guide-...ee21ba2dde
https://use-their-id.com/
https://linuxjourney.com/
good to learn linux and its free
https://hackers-arise.com/reverse-engine...bg-basics/
https://malwareunicorn.org/workshops/re101.html#0
https://intezer.com/blog/malware-reverse...beginners/
https://reshax.com/topic/47-reverse-engi...ollection/
https://forum.tuts4you.com/files/file/13...r-newbies/
https://malwareunicorn.org/workshops/re101.html#2
https://p.ost2.fyi/courses/course-v1:Ope...sm+2021_v1
https://0xinfection.github.io/reversing
https://github.com/mikesiko/PracticalMal...lysis-Labs - its book is: https://www.amazon.com/Practical-Malware...1593272901, well it is malware too not RE
https://www.youtube.com/playlist?list=PL...6PjamaY6JO
https://github.com/MalwareTech/Beginner-...Challenges - pass: MalwareTech
https://www.amazon.com/Practical-Reverse...1118787315 - needs experience - do not start with it
https://www.youtube.com/watch?v=ws7FZNEM...HMpnr0rOdh
https://www.youtube.com/watch?v=BRZq5EVQ...EPzkA3nPdL
https://www.youtube.com/playlist?list=PL...aOaSfZqHJc
https://www.youtube.com/playlist?list=PL...NW_6H9w-wC
https://www.youtube.com/playlist?list=PL...0mtAZ6xg5N - malware and re
**Best Binary Exploitation **
https://malwareunicorn.org/#/
https://www.youtube.com/watch?v=wa3sMSdL...fZbxDPec94
https://www.sans.org/cyber-security-cour...-analysis/
https://exploit.education/
https://www.youtube.com/watch?v=FB_e1mIhykk
https://www.youtube.com/watch?v=yQ8Sg_Dcg1E
https://www.youtube.com/watch?v=fIuGg3rvnzM
https://youtu.be/fIuGg3rvnzM
https://github.com/horsicq/Detect-It-Easy
https://www.hexacorn.com/blog/2023/04/21...t-it-easy/
https://malware.tech/posts/intro-to-die-script/
-
https://class.malware.re/
https://p.ost2.fyi/courses/course-v1:Ope...1_v1/about
https://github.com/0xZ0F/Z0FCourse_ReverseEngineering
https://github.com/ReversingID/Awesome-Reversing
https://github.com/tylerha97/awesome-reversing
https://guyinatuxedo.github.io/
https://0xresetti.github.io/reversing.html
https://malwareunicorn.org/workshops/re101.html#0
https://repo.zenk-security.com/Reversing...(2005).pdf
https://www.pentesteracademy.com/course?id=3
https://www.eccouncil.org/cybersecurity-...gineering/
https://steakenthusiast.github.io/categories/
https://www.varonis.com/blog/how-to-use-ghidra
https://www.youtube.com/watch?v=2kQmx2YYlDw
https://github.com/jtesta/ssh-audit
SSH Audit tool for your own boxes
https://app.geospy.ai/
https://start.me/p/rx6Qj8/nixintel-s-osi...ource-list
https://findxss.com/
https://buildcyber.ai/
free Videos from hack space con/ hack red con
https://roadmap.sh/
A good roadmap for IT people
https://en.fofa.info/
https://www.isc2.org/certifications/cc
ISC2's CC exam and training are currently free
https://pwn.college/
https://www.netacad.com/
https://overthewire.org/wargames/bandit/bandit0.html
https://pentesterlab.com/
https://portswigger.net/web-security
https://overthewire.org/wargames/
https://hackviser.com/tactics/tools
https://github.com/ossu/computer-science
https://github.com/ossu/computer-science
https://www.vulnhub.com/
https://www.root-me.org/
https://www.hackthissite.org/
https://www.cyberseclabs.co.uk/
https://pentesterlab.com/exercises
https://cuckooseggblog.com/challen
Learning Platforms & Courses
Chainshot (by Alchemy) – Interactive coding courses for smart contract security.
https://www.chainshot.com/
Secureum – Bootcamps and audit competitions for Ethereum smart contract security.
https://secureum.substack.com/
Ethernaut (by OpenZeppelin) – CTF-style game to exploit smart contracts and learn security.
https://ethernaut.openzeppelin.com/
Damn Vulnerable DeFi – A DeFi security wargame that teaches exploitation techniques.
https://www.damnvulnerabledefi.xyz/
Hack The Box Web3 Labs – New Web3 labs have been introduced on HTB for hands-on security challenges.
https://www.hackthebox.com/
Top cyber APIs
Shodan
Google safe browsing
PhishTank
VirusTotal
GreyNoise
RiskIQ / PassiveTotal
URLScan
AlienVault Open Threat Exchange
SecurityTrails
IPinfo
WhoisXMLAPI
Spamhaus
mnemonic
ThreatFox (from abuse.ch)
Free/Open Source API Security Tools
42Crunch: Free OpenAPI Editor and limited free (freemium) API Audit and Scan tools
Swagger UI: Free, open-source API documentation and testing tool
SoapUI: Free, open-source version for API functional and security testing
Akto: Open-source DAST and API security tool for automated discovery and vulnerability scanning
Arachni: Free for most use cases, including scanning open source projects
StackHawk: Free for open source projects and single application use
Gosec: Free static analysis for Go code, including API security checks
WuppieFuzz: Free, open-source REST API fuzzer
MISP: Open-source threat intelligence platform with API integration
Other Notable Free/Open Source Platforms
OpenVAS: Open-source vulnerability scanner (API available).
Censys: Free tier for internet-wide asset discovery and search.
TheHive, OpenCTI: Free, open-source threat intelligence and incident response platforms
this list was taken from
https://upskilld.com/article/free-cybersecurity-apis/
https://www.jit.io/resources/appsec-tool...rity-tools
https://owasp.org/www-community/Free_for...rity_Tools
https://www.recordedfuture.com/threat-in...-platforms
Azure Networking services for beginners
Code: AZURE-NET-0503 however link auto makes it free
https://www.udemy.com/course/azure-networking-services/
£264.94 worth of content, 54 hours 27 minutes total
Introduction To Bug Bounties - Main Web App Hacking
Code: 3D519E172B439CE2E1F9 however link auto makes it free
https://www.udemy.com/course/uncle-rats-...rt-1-2025/
[NEW - 2025] AWS Cost Optimizations MasterClass
Code: 8127D90BFBCC2950FB57 however link auto makes it free
https://www.udemy.com/course/aws-cost-op...sterclass/
----------------------------------------
Google NotebookLM
Code: MAYFREELEARNING however link auto makes it free
https://www.udemy.com/course/google-notebooklm-sta/
----------------------------------------
Pentesting 101: The Ultimate Hacking Guide Start To Finish
Code: AAD03C9F23A74EB79AA6 however link auto makes it free
https://www.udemy.com/course/pentesting-...ate-guide/
----------------------------------------
The Ultimate BAC and IDOR guide for Ethical Hacking
Code: F073E68065CC0F01DDAA however link auto makes it free
https://www.udemy.com/course/the-ultimat...l-hacking/
----------------------------------------
Uncle Rat's Ultimate Broad Scope And API Hacking guide
Code: 96886F7E3356233AC5BE however link auto makes it free
https://www.udemy.com/course/uncle-rats-...ing-guide/
├── Penetration Testing
│ ├── Reconnaissance: OSINT, DNS Recon
│ ├── Scanning: Nmap, Nessus
│ │ ├── Port Scanning, OS Detection
│ │ ├── Vulnerability Prioritization
│ ├── Exploitation: Metasploit, Custom Payloads
│ │ ├── Shellcode, ROP
│ │ ├── Fuzzing, Mitigation Bypass
│ ├── Post-Exploitation: Privilege Escalation
│ │ ├── Persistence, Data Exfiltration
│ ├── Reporting: Documentation, Recommendations
3. Advanced Topics
├── Offensive Security
│ ├── Exploit Development
│ ├── Advanced Persistent Threats (APTs)
│ ├── Red Team Operations
├── Security Operations Center (SOC)
│ ├── Monitoring, Incident Response
│ ├── SIEM Configuration
│ ├── Threat Intelligence
├── Digital Forensics
│ ├── Data Acquisition
│ ├── Evidence Preservation
│ ├── Analysis & Reporting
├── Compliance & Governance
├── GDPR, HIPAA
├── Risk Management
├── Policy Development
4. Emerging Technologies & Trends
├── Cloud Security
│ ├── Cloud Service Models (IaaS, PaaS, SaaS)
│ ├── Cloud Security Posture Management (CSPM)
│ ├── Cloud Access Security Brokers (CASB)
│ ├── Data Encryption in the Cloud
│ ├── Identity and Access Management (IAM)
│ ├── Cloud Security Best Practices
├── Zero Trust Architecture
│ ├── Principles of Zero Trust
│ ├── Identity and Device Authentication
│ ├── Network Segmentation
│ ├── Microsegmentation
│ ├── Policy Enforcement
├── Internet of Things (IoT)
│ ├── IoT Security Challenges
│ ├── Device Authentication & Encryption
│ ├── IoT Network Segmentation
├── Operating Systems
│ ├── Windows
│ │ ├── Registry, AD, GPO
│ │ ├── Event Logs
│ ├── Linux
│ │ ├── Filesystem, Permissions
│ │ ├── Systemd, Log Management
│ ├── MacOS
│ │ ├── SIP, Keychain Access
│ │ ├── Daemons, Gatekeeper
│ ├── Kernel Exploits
│ │ ├── Privilege Escalation, CVE
│ │ ├── Debugging, Exploit Dev
│ ├── Shell Scripting
│ ├── Bash, PowerShell
│ ├── Automation, Scheduling
├── Programming & Scripting
│ ├── Python
│ │ ├── Networking, Automation
│ │ ├── API, Pentesting
│ │ ├── Data Analysis
│ ├── Bash
│ │ ├── CLI Fu, Text Manipulation
│ │ ├── Network Config, Process Management
│ ├── PowerShell
│ │ ├── Cmdlets, Remoting
│ │ ├── Execution Policies, Admin Tasks
│ ├── C/C++
│ │ ├── Memory Management, Buffer Overflows
│ │ ├── Pointer Manipulation, Exploits
│ ├── Assembly Language
│ ├── x86/x64, Shellcode Dev
│ ├── Debugging, Reverse Engineering
│ ├── Reverse Engineering
│ ├── Disassembly, Decompilation
│ ├── Binary Patching, Malware Analysis
2. Intermediate Security Skills
├── Threat Modeling
│ ├── STRIDE: Spoofing, Tampering, etc.
│ ├── DREAD: Damage, Reproducibility, etc.
│ ├── MITRE ATT&CK: Tactics, Techniques
1. Basics
├── Networking
│ ├── OSI Model
│ │ ├── Layers 1-7, Functions
│ │ ├── Encapsulation/Decapsulation
│ ├── TCP/IP Suite
│ │ ├── IPv4/IPv6, TCP/UDP
│ │ ├── Protocol Ports, ICMP, ARP
│ ├── Subnetting
│ │ ├── CIDR, VLSM, Calculations
│ │ ├── Supernetting
│ ├── NAT/PAT
│ │ ├── Types, Mechanisms
│ │ ├── NAT Traversal
│ ├── DNS
│ │ ├── Resolution, DNSSEC
│ │ ├── Spoofing, Tunneling
│ ├── VPNs
│ │ ├── IPSec, SSL/TLS
│ │ ├── Split Tunneling
│ ├── Firewalls
│ │ ├── Stateful vs Stateless
│ │ ├── NGFW, Rule Creation
│ ├── Load Balancers
│ ├── Layer 4/7, Health Checks
│ ├── Algorithms, Session Persistence
# Beginner roadmap for Red Team
> Networking Fundamentals
├── TCP/IP Model
│ ├── Layers
│ ├── Protocols
│ └── Data Flow
├── Subnet Masking
│ ├── Network Addresses
│ ├── Subnet Masks
│ └── Broadcast Addresses
├── IP Routing
│ ├── Routing Protocols
│ │ ├── RIP
│ │ ├── OSPF
│ │ └── BGP
│ └── Packet Forwarding
└── Network Devices
├── Routers
├── Switches
└── Firewalls
> Operating Systems
├── Linux
│ ├── Command-Line Interface
│ ├── File Systems
│ ├── Processes
│ └── System Administration
├── Windows
│ ├── Registry
│ ├── File Systems
│ ├── Services
│ └── User Management
└── macOS
├── Architecture
└── Command-Line Tools
> Programming
├── Python
│ ├── Data Structures and DBMS
│ ├── Control Flow
│ └── Libraries
│ ├── Scapy
│ └── BeautifulSoup
├── Bash
│ └── Shell Scripting
└── C/C++ (Optional)
└── Exploitation and Malware Development
> Cybersecurity Basics
├── Threat Landscape
│ ├── Malware
│ ├── Phishing
│ └── DDoS
├── Vulnerability Types
│ ├── SQL Injection
│ ├── XSS
│ └── Buffer Overflows
└── Security Controls
├── Firewalls
├── Intrusion Detection Systems
└── Antivirus
└── Visualization
https://class.malware.re/
https://p.ost2.fyi/courses/course-v1:Ope...1_v1/about
https://github.com/0xZ0F/Z0FCourse_ReverseEngineering
https://github.com/ReversingID/Awesome-Reversing
https://github.com/tylerha97/awesome-reversing
https://guyinatuxedo.github.io/
https://0xresetti.github.io/reversing.html
https://malwareunicorn.org/workshops/re101.html#0
https://repo.zenk-security.com/Reversing...(2005).pdf
https://www.pentesteracademy.com/course?id=3
Building a FullStack AI SaaS Web App on AWS and Vercel
https://www.udemy.com/course/building-a-...nd-vercel/
Code: ECD9915FF6663D2E0A9F however it auto applies it when u click link
-------------------------------------------------
Learning AWS CDK by Building Event-Driven Architecture App
https://www.udemy.com/course/learning-aw...cture-app/
Code: 668E2B7D148FB00FE9B1 however it auto applies it when u click link
-------------------------------------------------
Create a FullStack App with AWS API Gateway and AWS AppSync
https://www.udemy.com/course/create-a-fu...s-appsync/
Code: 0C4F5B7335F5F1055477 however it auto applies it when u click link
-------------------------------------------------
AWS Bedrock : Quick Guide for Busy Professionals
https://www.udemy.com/course/aws-bedrock...essionals/
Code: D8F60422D1456E8FE255 however it auto applies it when u click link
-------------------------------------------------
Mastering API Management for Generative AI in Azure
https://www.udemy.com/course/azure-api-m...rative-ai/
Code: AZURE-APIM-0319 however it auto applies it when u click link
-------------------------------------------------
RAG in Azure with OpenAI and ChatGPT LLM model
https://www.udemy.com/course/rag-azure/
Code: AZURE-RAG-0319 however it auto applies it when u click link
£164.94 worth of free content, 15hrs 51mins total
More Free Courses
CISSP-Important Recap Before Exam | Domain 1-2
https://www.udemy.com/course/cissp-impor...2-updated/
Code: CISSPRAMADAMDEAL however it auto applies when u click link
-------------------------------------------------
CISSP-Important Recap Before Exam | Domain 3-4-5
https://www.udemy.com/course/cissp-impor...5-updated/
Code: CISSPRAMADAMDEAL however it auto applies when u click link
-------------------------------------------------
CISSP-Important Recap Before Exam | Domain 6-7-8
https://www.udemy.com/course/cissp-impor...8-updated/
Code: CISSPRAMADAMDEAL however it auto applies when u click link
£139.97 worth of free content, 7hrs 6mins total
MASSIVE free courses for today🔥
Deploy Infra in the Cloud using Terraform. 9hrs
https://www.udemy.com/course/deploy-infr...terraform/
Code: TERRAFORM-IAC-0323 however it auto applies when u click link
-------------------------------------------------
Learn Azure DevOps CI/CD pipelines 14hrs
https://www.udemy.com/course/azure-devop...pipelines/
Code: AZURE-DEVOPS-0323 however it auto applies when u click link
-------------------------------------------------
Python For Data Science In 2025 A-Z: EDA With Real Exercises 15hrs 45mins
https://www.udemy.com/course/data-analys...-tutorial/
Code: 53B051EC52F8EDC3ADD5 however it auto applies when u click link
-------------------------------------------------
100 Days of Code: A Challenging Complete Python Pro Bootcamp 29hrs 3mins
https://www.udemy.com/course/excellent-p...p-in-2023/
Code: E42B22668C7885C0C84A however it auto applies when u click link
-------------------------------------------------
Master Cisco CCNA 200-301: Comprehensive All-in-One Course 50hrs
https://www.udemy.com/course/ccna-jitl/
Code: JITL2025-1 to get it free (this one is CISCO certified)
.
🦉 **OWLSEC CYBERSECURITY CERTIFICATION GUIDE** 🦉
This roadmap is designed to help you navigate the sea of certifications. Whether you're just starting out or looking to master your craft, here is the path forward:
---
🛡️ **BLUE TEAM (Defensive Security)**
*Focus: Defense, Incident Response, Forensics, and Analysis*
🟢 **Beginner**
> • [**Security+**](<https://www.comptia.org/certifications/security>) (CompTIA) - Paid
> • [**BTL1**](<https://www.securityblue.team/certifications/blue-team-level-1>) (Blue Team Level 1) - Paid
> • [**CSA**](<https://www.eccouncil.org/programs/certified-soc-analyst-csa/>) (Certified Security Analyst) - Paid
> • [**eCDFP**](<https://ine.com/security/certifications/ecdfp-certification>) (Certified Digital Forensics Professional) - Paid
🟡 **Intermediate**
> • [**CySA+**](<https://www.comptia.org/certifications/cybersecurity-analyst>) (CompTIA) - Paid
> • [**CDSA**](<https://academy.hackthebox.com/preview/certifications/htb-certified-defensive-security-analyst>) (Certified Defensive Security Analyst) - Paid
> • [**BTL2**](<https://www.securityblue.team/certifications/blue-team-level-2>) (Blue Team Level 2) - Paid
> • [**CCD**](<https://cyberdefenders.org/certified-cyberdefender-certification/>) (Certified Cloud Defender) - Paid
> • [**OSDA**](<https://www.offsec.com/courses/soc-200/>) (Offensive Security Defensive Analyst) - Paid
> • [**eCTHP**](<https://ine.com/security/certifications/ecthp-certification>) (Certified Threat Hunting Professional) - Paid
> • [**GCIH**](<https://www.giac.org/certification/certified-incident-handler-gcih>) (GIAC Certified Incident Handler) - Paid
> • [**eCIR**](<https://ine.com/security/certifications/ecir-certification>) (Certified Incident Responder) - Paid
🔴 **Advanced**
> • [**CASP+**](<https://www.comptia.org/certifications/comptia-advanced-security-practitioner>) (CompTIA) - Paid
> • [**GCFA**](<https://www.giac.org/certification/certified-forensic-analyst-gcfa>) (GIAC Certified Forensic Analyst) - Paid
⚔️ **RED TEAM (Offensive Security)**
*Focus: Pentesting, Bug Bounty, Exploit Dev, and Red Teaming*
⚪ **Novice**
> • [**KLCP**](<https://www.offsec.com/courses/pen-103/>) (Kali Linux Certified Professional) - Paid
🟢 **Beginner**
> • [**eJPT**](<https://ine.com/security/certifications/ejpt-certification>) (Junior Penetration Tester) - Paid
> • [**PNPT**](<https://tcm-sec.com/pnpt/>) (Practical Network Penetration Tester) - Paid
> • [**CRTP**](<https://www.alteredsecurity.com/redteamlab>) (Certified Red Team Professional) - Paid
> • [**CEH**](<https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/>) (Certified Ethical Hacker) - Paid
🟡 **Intermediate**
> • [**CPTS**](<https://academy.hackthebox.com/preview/certifications/htb-certified-penetration-testing-specialist>) (Certified Penetration Testing Specialist) - Paid
> • [**CRTO**](<https://training.zeropointsecurity.co.uk/courses/red-team-ops>) (Certified Red Team Operator) - Paid
> • [**OSCP**](<https://www.offsec.com/courses/pen-200/>) (OffSec Certified Professional) - Paid
> • [**CBBH**](<https://academy.hackthebox.com/preview/certifications/htb-certified-bug-bounty-hunter>) (Certified Bug Bounty Hunter) - Paid
> • [**OSWP**](<https://www.offsec.com/courses/pen-210/>) (Offensive Security Wireless Professional) - Paid
> • [**eWPT**](<https://ine.com/security/certifications/ewpt-certification>) (Web Penetration Tester) - Paid
🔴 **Advanced**
> • [**CRTO II**](<https://training.zeropointsecurity.co.uk/courses/red-team-ops-ii>) (Certified Red Team Operator II) - Paid
> • [**OSWA**](<https://www.offsec.com/courses/web-200/>) (Offensive Security Web Assessor) - Paid
> • [**OSWE**](<https://www.offsec.com/courses/web-300/>) (Offensive Security Web Expert) - Paid
> • [**OSEP**](<https://www.offsec.com/courses/pen-300/>) (Offensive Security Experienced Penetration Tester) - Paid
> • [**CWEE**](<https://academy.hackthebox.com/preview/certifications/htb-certified-web-exploitation-expert>) (Certified Web Exploitation Expert) - Paid
> • [**CAPE**](<https://academy.hackthebox.com/preview/certifications/htb-certified-active-directory-pentesting-expert>) (Certified Adversary Emulation Professional) - Paid
⚫ **Expert / Specialization**
> • [**OSCE3**](<https://www.offsec.com/offsec-certified-expert-3-osce3/>) (Offensive Security Certified Expert 3) - Paid
> • [**OSMR**](<https://www.offsec.com/courses/exp-312/>) (Offensive Security Malware Researcher) - Paid
> • [**OSED**](<https://www.offsec.com/courses/exp-301/>) (Offensive Security Exploit Developer) - Paid
## 🎥 Cybersecurity Starter Videos – Quick Guide
1. HTB: [Getting Started with HTB Academy](https://www.youtube.com/watch?v=Y4vv5sjNo0Y)
3. HackerXSploit: [HackerXSploit Resources](https://hackersploit.org/), Youtube: [Hackersploit](https://www.youtube.com/@hackersploit)
4. John Hammond: [Youtube](https://www.youtube.com/@_JohnHammond)
5. Ideas on avenues of approach. Jack Rhysider: [DarkNet Diaries](https://www.youtube.com/@JackRhysider)
## 🔴 Red Team (Attacking) Path
### Start Here
• THM: [Pre Security Path](https://tryhackme.com/path/outline/presecurity)
### Learn Tools & Basics
• HTB: [Linux Fundamentals](https://academy.hackthebox.com/module/details/18)
• THM: Windows Fundamentals 1 - 3
1. [Windows Fundamentals 1](https://tryhackme.com/room/windowsfundamentals1xbx)
2. [Windows Fundamentals 2](https://tryhackme.com/room/windowsfundamentals2x0x)
3. [Windows Fundamentals 3](https://tryhackme.com/room/windowsfundamentals3xzx)
### Know the Systems
• HTB: [Linux Fundamentals](https://academy.hackthebox.com/module/details/18)
• HTB: [Intro to Networking](https://academy.hackthebox.com/module/details/34)
### Get Offensive (Practice Real Attacks)
• HTB Academy: [Academy](https://academy.hackthebox.com/)
• HTB: “Starting Point” Machines
• THM Jr Penetration Tester: [JrPentester](https://tryhackme.com/path/outline/jrpenetrationtester)
• VulnHub: [Vulnhub Labs](https://www.vulnhub.com/)
## 🔵 Blue Team (Defending) Path
### Start Here
• THM: [Pre Security](https://tryhackme.com/path/outline/presecurity)
• THM: [Cyber Defense 101](https://tryhackme.com/path/outline/cybersecurity101)
• CyberDefense: [Network Security](https://cyberdefenders.org/blueteam-ctf-...-forensics)
### Know the Systems
• THM: Windows Fundamentals 1 - 3
1. [Windows Fundamentals 1](https://tryhackme.com/room/windowsfundamentals1xbx)
2. [Windows Fundamentals 2](https://tryhackme.com/room/windowsfundamentals2x0x)
3. [Windows Fundamentals 3](https://tryhackme.com/room/windowsfundamentals3xzx)
• HTB: [Linux Fundamentals](https://academy.hackthebox.com/module/details/18)
• HTB: [Intro to Networking](https://academy.hackthebox.com/module/details/34)
### Detect & Analyze
• HTB Academy: [SOC Level 1](https://tryhackme.com/path/outline/soclevel1)
• CyberDefenders [Network Security](https://cyberdefenders.org/blueteam-ctf-...-forensics)