Cyber Security Projects & Learning Hub

Understand today's threat landscape, the rules of engagement and how professional ethical hackers think and work.

• play_circleThe cyber threat landscape and the CIA triad
• play_circleTypes of hackers, legal boundaries and rules of engagement
• play_circleCyber Kill Chain and the MITRE ATT&CK framework
• play_circleSecurity controls, risk and defence-in-depth fundamentals
• play_circleLab: building your virtual ethical hacking lab

Master the networking concepts every attacker and defender relies on, from packets to protocols.

• play_circleOSI and TCP/IP models deep dive
• play_circleIP addressing, subnetting and routing
• play_circleCore protocols: DNS, DHCP, HTTP/S, FTP and SSH
• play_circleFirewalls, IDS/IPS, proxies and VPNs
• play_circleLab: packet capture and analysis with Wireshark

Get fluent with the operating systems you will attack, defend and automate every day.

• play_circleLinux file system, users and permissions
• play_circleBash scripting for security automation
• play_circleWindows internals, services and the registry
• play_circleActive Directory and PowerShell essentials
• play_circleLab: hardening Linux and Windows hosts

Write your own security tools and automate repetitive testing tasks with Python.

• play_circlePython fundamentals for security engineers
• play_circleSockets and network programming
• play_circleBuilding a multi-threaded port scanner
• play_circleAutomating recon with APIs and libraries
• play_circleLab: creating a personal security toolkit

Gather intelligence on a target using passive and active techniques before a single packet is fired.

• play_circlePassive vs active reconnaissance
• play_circleOSINT tooling: theHarvester, Maltego and Shodan
• play_circleDNS enumeration and subdomain discovery
• play_circleGoogle dorking and social media intelligence
• play_circleLab: producing a full OSINT report

Discover live hosts, services and weaknesses, then prioritise them like a professional assessor.

• play_circleNmap scanning techniques and NSE scripts
• play_circleService, SMB, SNMP and LDAP enumeration
• play_circleVulnerability scanning with Nessus and OpenVAS
• play_circleCVSS scoring and risk-based prioritisation
• play_circleLab: writing a vulnerability assessment report

Exploit vulnerable systems, escalate privileges and understand post-exploitation tradecraft.

• play_circleExploitation with the Metasploit Framework
• play_circlePassword attacks and hash cracking
• play_circleLinux and Windows privilege escalation
• play_circlePost-exploitation, pivoting and persistence
• play_circleLab: compromising a vulnerable machine end-to-end

Find and exploit the most common web vulnerabilities using industry-standard tools.

• play_circleOWASP Top 10 explained
• play_circleSQL injection and cross-site scripting (XSS)
• play_circleAuthentication, session and access-control flaws
• play_circleWeb testing with Burp Suite
• play_circleLab: attacking OWASP Juice Shop and DVWA

Extend your testing beyond the network perimeter into Wi-Fi, mobile apps and the cloud.

• play_circleWi-Fi security and WPA2/WPA3 attacks
• play_circleAndroid and iOS application security
• play_circleCloud shared-responsibility model and misconfigurations
• play_circleIAM and storage exposure in AWS and Azure
• play_circleLab: auditing a cloud account for weaknesses

Analyse how modern malware and advanced persistent threats operate, and the cryptography that protects data.

• play_circleMalware types and analysis fundamentals
• play_circlePhishing and social-engineering campaigns
• play_circleAPTs and ransomware case studies
• play_circleCryptography, hashing and PKI essentials
• play_circleLab: static and dynamic malware analysis

Work like a SOC analyst: detect, investigate and respond to real-world security incidents.

• play_circleSOC roles, tiers and workflows
• play_circleSIEM fundamentals with Splunk and the ELK stack
• play_circleLog analysis and threat detection
• play_circleThe NIST incident response lifecycle
• play_circleLab: investigating a simulated breach

Tie everything together with governance, legal awareness and a full-scope professional penetration test.

• play_circleGovernance, risk and compliance: ISO 27001 and NIST CSF
• play_circleCyber law, privacy and responsible disclosure
• play_circleWriting professional penetration test reports
• play_circleCertification roadmap: CEH, Security+ and OSCP
• play_circleCapstone: full-scope penetration test and report