Build real cybersecurity skills, at your own pace.
Practical, hands-on courses for security professionals and people growing into the field. Clear explanations, modern labs, and friendly mentors to guide you.
Course catalog
Pick a topic that interests you. Every course includes a guided lab environment so you can practice safely.
Linux Kernel Exploitation
Learn how Linux kernel security works in practice — memory protections like KASLR, SMEP, and SMAP, plus how common vulnerability classes are studied responsibly.
Web Cache Deception
Understand HTTP request smuggling and cache deception so you can find these issues in your own stack and fix them with confidence.
OSINT Frameworks
Turn scattered public data into structured intelligence using ethical, repeatable open-source research workflows.
Cloud Infrastructure Auditing
Audit real-world AWS and Azure environments — misconfigured storage, over-broad IAM, and risky serverless setups — and learn how to fix them.
Binary Reverse Engineering
Use Ghidra and IDA Pro to analyse unknown binaries and understand how malware behaves so you can defend against it.
Active Directory Attack Paths
Understand Active Directory risk paths — Kerberoasting, DCSync, ticket abuse — and how to harden domains against them.
Mobile Application Pentesting
Assess Android and iOS apps end to end: static analysis, runtime inspection, network review, and clear reporting.
Red Team Operations
Plan and run thoughtful adversary-simulation engagements that produce real value for the defenders you work with.
Smart Contract Auditing
Review Solidity smart contracts for reentrancy, oracle issues, and access-control mistakes using Foundry and Echidna.
Threat Hunting & Detection
Write YARA and Sigma rules and run hunt missions that stay useful in noisy, real-world environments.
Password Hygiene Essentials
A short, friendly course on building strong passwords, using password managers, and turning on multi-factor authentication.
Phishing Awareness Fundamentals
Spot phishing emails, suspicious links, and social-engineering attempts before they cause harm — no technical background required.
Meet your instructors
Working practitioners who genuinely enjoy mentoring. You'll always have someone to ask.
0xNULL
Lead ArchitectSecurity researcher focused on finding and responsibly disclosing vulnerabilities. Loves teaching the fundamentals well.
VECTOR
Field OpCloud security engineer who has spent years helping teams design and review resilient hybrid-cloud environments.