// ~/tutorials
Tutorials
Practical guides written for your own lab and for platforms that invite you to attack them. Work through them in order or jump to your level.
beginnerStart here
Build Your Hacking Lab
Set up an isolated virtual lab with an attack box and vulnerable targets so you can practice without breaking the law or your home network.
Linux Command Line for Hackers
The shell skills every security tutorial assumes you already have, from navigation and permissions to pipes, processes, and networking.
Network Recon with Nmap
Discover hosts, open ports, service versions, and quick wins with Nmap, then read the output like a pentester.
Web Hacking 101 with Burp Suite
Proxy your browser through Burp, understand what an HTTP request really contains, and use Repeater to test how an application handles input.
How to Approach Your First CTF
CTF categories explained, a repeatable way to attack a challenge, and how to get unstuck without just reading the answer.
Reading Packets with Wireshark
Capture and dissect network traffic, write display filters that find what matters, and reconstruct conversations from a packet capture.
OSINT Fundamentals
Map an organization's public footprint ethically, from domains and certificates to leaked code, and learn to audit your own exposure.
Password Security from the Defender's Side
How passwords are stored, why they fall, what modern guidance actually says, and how to measure your own policy in a lab.
intermediateLevel up
Bug Bounty Methodology and Responsible Disclosure
How to pick programs, read scope like a lawyer, find bugs others miss, and write reports that get paid instead of closed.
Operator Tradecraft Nobody Teaches You
The unglamorous habits that separate professionals from hobbyists, including session logging, clean environments, note systems, and safe handling of client data.
Active Directory Concepts in a GOAD Lab
Build the Game of Active Directory lab and learn the trust relationships, Kerberos tickets, and misconfigurations that drive internal assessments.
Cloud Misconfigurations with flAWS
Learn how AWS environments really get breached, through public buckets, leaked keys, and metadata exposure, using the free flAWS challenges.
Mobile App Testing Setup
Build an Android testing environment with an emulator, adb, and an intercepting proxy, then practice on intentionally vulnerable apps.
advancedFor seasoned operators
Writing a Pentest Report People Act On
Structure, severity rating, evidence, and remediation advice that make a report the most valuable thing you deliver.
Think Like a Defender
How blue teams actually see your activity, using logs, ATT&CK mapping, and detection rules, and why understanding them makes you a far better tester.
Building a Recon Automation Pipeline
Chain subdomain discovery, probing, and change detection into a scope-safe pipeline that tells you when a target's attack surface changes.
A Safe Malware Analysis Lab
Build an isolated analysis environment with FLARE-VM and REMnux, handle samples safely, and perform first-pass static and behavioral triage.
Running a Purple Team Exercise
Plan, execute, and measure a collaborative exercise that tests real detections against emulated adversary techniques, end to end.