Padawan Path
Not sure where to begin? Build your character in The Gauntlet first. It takes a couple of minutes, works out what you're naturally suited to, and then sends you back here to a starting track that should feel easy to pick up.
Already know your way around? Ignore that and jump into any track below.
A padawan is someone in training, and that is what this section is for: actually learning the trade, not just reading about it. Pick a track and work through its topics. Each one is short: what it is, how it works, and how to test for it.
Foundations
The networking, Linux and web basics everything else sits on. Start here if you're brand new.
6 topicsWeb
Web application testing, built around the OWASP Top 10 and the flaws that actually come up on a test.
10 topicsInternal & Active Directory
Footholds, privilege escalation and the attack paths that lead to domain takeover.
6 topicsCode Review
Whitebox testing: finding bugs by reading the source instead of poking the app.
4 topicsExternal & Wireless
The perimeter, the people and the airwaves — getting in from outside.
5 topics