⚠️ Disclaimer: Unofficial personal collection — not affiliated with any organization listed. Content is shared as-is, links may change, and nothing here is professional advice. Always practice ethical and legal standards. Feel free to reach out with suggestions or corrections!
New to cybersecurity? No experience needed — follow this path:
Network Engineering
Ethical Hacking
IoT Security
Linux
Malware Analysis
Digital Forensics
Incident Response
Network Security
SOC Operations
Cloud Security
Threat Intelligence
Penetration Testing
Risk Management
Social Engineering
Bug Bounty
Security Architecture
OSINT
Exploit Development
Scripting
Red Teaming
Wireless Security
Web Hacking
Reverse Engineering
A.I/M.L Security
Vulnerability Assessment
Web Application Security
Governance & Compliance
Identity Access & Management
Job Roles
Network Penetration Tester
Web Penetration Tester
Malware Analyst
Network Security Professional
Network Admin
Security System Administrator
Vulnerability Tester
Security Researcher
Red Team Member
Blue Team Member
SOC Analyst
Security Auditor
Security Engineer
Security Analyst
Vulnerability Assessment Analyst
Network Security Operations
Application Security
Ethical Hacker
Security Manager
Skills to Learn
Penetration Testing
Vulnerability Assessment
Security Auditing
Ethical Hacking
Malware Analysis
Bug Bounty
Exploit Development
Kali Linux
Android Hacking
Network Hacking
GDPR
Python
Threat Analysis
Reverse Engineering
Cyber Forensics
IoT Security
SOC Operations
Web Hacking
Digital Forensics
CompTIA
CISSP
AWS Security
Docker Security
Kubernetes Security
Data Protection & Compliance
Incident Response
Cloud Penetration Testing
Courses sourced from cloudskillsboost.google
Certification
Link
Cisco – Introduction to Cybersecurity
Link
IBM – Cybersecurity Fundamentals
Link
Microsoft SC-900
Link
Google IT Support (Coursera)
Link
FutureLearn – Intro to Cyber Security
Link
FutureLearn – Cyber Security Foundations
Link
Fortinet – Threat Landscape
Link
Cybrary – Intro to IT & Cybersecurity
Link
Qualys Free Certifications (12 Courses)
Channel
Focus
John Hammond CTF, malware, general security
IppSec HackTheBox walkthroughs
Hak5 Hardware hacking, tools
LiveOverflow Binary exploitation, CTF
The New Boston Programming basics
Loi Liang Yang Ethical hacking
PC Security Channel Malware analysis
NullByte Hacking tutorials
Collins Infosec Cybersecurity
HackerSploit Penetration testing
Computerphile CS concepts explained
Hackaday Hardware & security
NetworkChuck Networking, Linux, cloud
Be Practical Tech Practical cybersecurity
TCM Security Beginner pentesting & career
David Bombal Networking, ethical hacking
Simply Cyber SOC, career advice
STÖK Bug bounty
Ryan Montgomery (0day) Pentesting, safety awareness
InsiderPhD Bug bounty, beginner-friendly web security
NahamSec Bug bounty, recon, web app testing
UnixGuy Cloud security and cybersecurity careers
Prabh Nair CISSP, cloud security, certification prep
RSAC Conference Conference talks and industry trends
Black Hat Advanced security research presentations
DEF CON Hacker conference talks and demos
OWASP Foundation Web application security education
SANS Institute Security training and technical research
Professor Messer CompTIA certifications
Network Engineering (YouTube)
Tool
Use
Splunk SIEM & log analysis platform
CrowdStrike Endpoint detection & response
TheHive Incident response & case management
MISP Malware information sharing platform
Wireshark Network traffic analysis
SOC GitHub Projects (Hands-On Labs)
Projects by 0xrajneesh on GitHub
Tool
Use
zANTI MITM attacks
Fing Network scanner (like nmap)
Wifite Wireless attacks
Intercepter-NG
Capture passwords & cookies on public networks
Termux Linux terminal on Android
FRP Hijacker
FRP bypass
MTK Flashing
MediaTek device flashing
SamFW Samsung firmware
Extension
Use
FoxyProxy Proxy management (works with Burp/ZAP)
Shodan In-browser Shodan threat intelligence
Wappalyzer Website technology profiler
Tool
Use
Nikto Web server vulnerability scanner
Gobuster Directory/subdomain brute forcer
Feroxbuster Fast directory discovery
Wfuzz Web fuzzer
SQLmap Automated SQL injection tool
xssnow XSS payload collection
Tool
Use
Aircrack-ng WiFi security auditing suite
Kismet Wireless network detector & sniffer
Tool
Use
Nmap Network discovery & port scanning
Nessus Vulnerability scanner
OpenVAS Open-source vulnerability scanner
Masscan Fast large-scale port scanner
Workflow-based methodology reference — organized by attack phase and technique category.
Subdomain Enumeration
DNS & IP Lookup
Port Scanning
WHOIS & Domain Research
Certificate Transparency (CT Logs)
Web Crawling & Spidering
Google Dorking / Search Operators
2. Web Application Testing
XSS Testing
SQL Injection Testing
File Upload Testing
Directory & Path Discovery
SSRF / LFI / RFI Testing
HTML/JS Analyzers
Network Scanning
Port & Service Enumeration
Packet Sniffing
Traffic Analysis
ARP/DNS Spoofing Simulation
Host Discovery
Protocol Inspection
4. Authentication Testing
Brute Force & Credential Stuffing
Session Management Testing
JWT / Token Analysis
OAuth / SSO Flaws
Password Policy Bypass
MFA Bypass Testing
5. Vulnerability Assessment
CVE / Known Vulnerability Scanning
Misconfiguration Detection
Permission & Privilege Auditing
Web Server Scanning
Service Version Fingerprinting
Risk Prioritization
6. Security Headers & Config Testing
HTTP Security Headers Audit
Cookie & Session Flag Testing
TLS/SSL Configuration Testing
CORS Misconfiguration Testing
Clickjacking Prevention (X-Frame-Options)
CSP (Content Security Policy) Review
Metadata Extraction
File Type Detection / Magic Bytes
Steganography Detection
Binary / Hex Analysis
Embedded Payload Detection
Document Forensics (PDF, Office files)
8. Fuzzing & Input Testing
Parameter Fuzzing
API Endpoint Fuzzing
Boundary / Edge Case Testing
Buffer Overflow Inputs
Format String Testing
Mutation-Based Fuzzing
9. Automation & Template-Based Scanning
Nuclei Templates
Custom YAML/JSON Scan Configs
CI/CD Pipeline Integration
Scheduled Scan Automation
Mass Scanning Scripts
Result Aggregation & Deduplication
10. Mobile Security Analysis
APK Decompilation & Reverse
Android Permission Analysis
Traffic Interception / SSL Pinning Bypass
Insecure Local Storage Detection
Weak Encryption Auditing
Android/iOS App Testing
Binary Disassembly
Static Analysis
Dynamic / Runtime Analysis
Hardcoded Secret Extraction
Encryption Routine Identification
C2 / Malware Flow Analysis
12. Encoding, Hashing & Encryption
Base64 / URL Encoding & Decoding
Hash Generation & Cracking (MD5, SHA, bcrypt)
JWT Decoding & Manipulation
Cipher Identification
Payload Obfuscation / Deobfuscation
Weak Crypto Detection
13. Forensics & Incident Analysis
Memory Dump Analysis
Log Review & Timeline Reconstruction
Disk Image Analysis
Deleted File Recovery
Persistence Mechanism Detection
Attack Attribution
HTTP Request Builder
Header Inspector / Analyzer
Temp Email / Identity Generator
Reverse Shell Generator
Payload Encoder / Decoder
Hash Identifier
15. Simulation & Learning Labs
XSS / SQLi / SSRF Practice Environments
Brute Force Labs
Account Takeover Challenges
CTF-Style Exercises
Incident Response Simulations
16. Post-Assessment Tools
Privilege Escalation Scripts
User / Share Enumeration
Lateral Movement Helpers
Payload Delivery Tools
Post-Exploitation Checklists
Report / Evidence Collection
17. Cloud & Container Security
S3 Bucket Misconfiguration Scan
Docker Image Vulnerability Scan
Kubernetes RBAC Auditing
Cloud IAM Review
Container Escape Testing
Public Cloud Exposure Detection
18. Browser & Extension Tools
Traffic Interception (Burp/ZAP)
Browser DevTools Exploitation
CSP Debugger
Script Injection via Extensions
Cookie / Storage Inspector
Search Engines for Pentesters Malware Analysis Sandboxes DFIR / Windows Registry Forensics Overview
Artifacts
#
Project
#
Project
1
Port Scanning with Nmap
16
Exploring OSINT with Maltego
2
Network Packet Analysis
17
DNS Enumeration
3
MAC Address Spoofing
18
Simple ARP Spoofing Attack
4
Brute Forcing SSH Login
19
Creating Fake Login Pages
5
Simple Password Cracker
20
Understanding Cookies and Sessions
6
SQL Injection Basics
21
Creating Custom Wordlists
7
Exploring XSS Vulnerabilities
22
SQLmap Usage for SQL Injection
8
Wi-Fi Network Scanning
23
Basic Firewall Evasion Techniques
9
Social Engineering
24
HTTP Headers Analysis
10
Information Gathering with Recon-ng
25
Exploring File Inclusion Vulnerabilities
11
Email Phishing Simulation
26
Understanding VPNs and Proxychains
12
Building a Simple Keylogger
27
Burp Suite Basics
13
Setting Up a Honeypot
28
Command Injection
14
Packet Sniffing with Scapy
29
Password Hash Cracking with Hashcat
15
Google Dorking
30
Setup CTF Challenge
#
Project
#
Project
1
Building a Vulnerability Scanner in Python
21
Conducting Phishing Campaigns
2
Privilege Escalation
22
Reverse Engineering Basics
3
Metasploit Basics
23
Cross-Site Scripting (XSS) Automation
4
Exploring Directory Traversal
24
Setting Up a Virtual Lab for Pentesting
5
Session Hijacking in HTTP
25
Email Spoofing
6
Exploiting CSRF Vulnerabilities
26
Exploiting Web Sockets
7
Setting Up a C2 Server
27
Command and Control Using Netcat
8
SSL Stripping with Bettercap
28
Router Exploitation
9
Wireless Network Hacking
29
Enumeration with Enum4Linux
10
Code Injection in Web Applications
30
Creating Custom Exploits for Web Applications
11
Advanced Social Engineering Toolkit (SET)
31
Using Wi-Fi Pineapple for MITM Attacks
12
Using Hydra for Password Cracking
32
Exploring Buffer Overflow on Linux
13
Network Mapping with Netdiscover
33
Network Recon with Airodump-ng
14
SQL Injection Exploitation with SQLmap
34
Privilege Escalation on Windows
15
File Upload Exploitation
35
Automated SQL Injection with jSQL
16
ARP Poisoning and MITM Attack
36
Mobile Application Pentesting
17
Exploit Development Basics
37
Analyzing Network Logs for Intrusions
18
Using Shodan for Recon
38
DNS Tunneling
19
Web Application Security with ZAP
39
Brute Force Attack Simulation
20
Automate Vulnerability Scanning with OpenVAS
40
Client-Side Attacks with BeEF
#
Project
#
Project
1
Advanced Buffer Overflow Exploitation
16
Custom Bruteforce Tools with Python
2
Exploit Vulnerable APIs
17
Advanced SQL Injection Automation
3
Cross-Site Request Forgery (CSRF) Automation
18
Creating Persistent Backdoors
4
Custom Malware Development
19
NTLM Hash Extraction
5
Develop a Remote Keylogger
20
Social Media Phishing Campaigns
6
Post-Exploitation with Metasploit
21
Advanced Network Tunneling
7
Exploit Evasion Techniques
22
Developing WAF Bypass Techniques
8
Advanced Ransomware Simulation
23
Password Spraying Attack
9
Browser Exploitation
24
Reverse Engineering for Malware Analysis
10
Wireless Deauthentication Attack
25
Automating Reconnaissance with Python
11
Developing a Python RAT
26
Custom Protocol Exploitation
12
Reverse Shell Development
27
Bypassing Two-Factor Authentication
13
Code Injection in DLL Files
28
Code Injection Exploits for Shellcode Execution
14
Privilege Escalation on Linux
29
Zero-Day Vulnerability Research
15
Exploit Windows SMB Vulnerabilities
30
End-to-End Pentest Simulation
Surface
Common Issues
Web
XSS, SQL Injection, CSRF, authentication flaws
API
Broken authentication, data exposure, rate-limit issues
Mobile
Insecure storage, improper encryption, weak permissions
Cloud
Misconfigurations, exposed data buckets, privilege issues
IoT
Firmware flaws, insecure communication, weak configurations
Networking
OSI Model, TCP/IP, DNS & DHCP, Routing & Switching, Firewalls & Protocols
Related standard: ISO 27001
#
Vulnerability
#
Vulnerability
1
SQL Injection
26
Misconfigured CORS Policies
2
Cross-Site Scripting (XSS)
27
Credential Stuffing
3
Cross-Site Request Forgery (CSRF)
28
Subdomain Takeover
4
Remote Code Execution (RCE)
29
Man-in-the-Middle (MITM)
5
Insecure Direct Object References (IDOR)
30
API Vulnerabilities
6
Command Injection
31
Broken Session Management
7
XML External Entity (XXE)
32
Cache Poisoning
8
Broken Authentication
33
Race Conditions
9
Security Misconfigurations
34
HTTP Response Splitting
10
Sensitive Data Exposure
35
Improper Input Validation
11
Path Traversal
36
Weak Encryption Practices
12
Buffer Overflow
37
Email Spoofing
13
Directory Listing
38
DNS Spoofing
14
Server-Side Request Forgery (SSRF)
39
Outdated Software Vulnerabilities
15
Broken Access Control
40
Denial of Service (DoS)
16
Privilege Escalation
41
Distributed Denial of Service (DDoS)
17
Unrestricted File Upload
42
HTTP Request Smuggling
18
Insecure Deserialization
43
Password Cracking
19
Weak Password Policies
44
Missing Security Headers
20
Clickjacking
45
Third-Party Dependency Risks
21
Server-Side Template Injection (SSTI)
46
Hardcoded Credentials
22
Information Disclosure
47
Improper Error Handling
23
Local File Inclusion (LFI)
48
Malware Injection
24
Remote File Inclusion (RFI)
49
Default Configuration Exploits
25
Insufficient Logging and Monitoring
50
Open Redirect
owasp.org/Top10/2025 — Updated 2025
#
Vulnerability
Description
A01
Broken Access Control Users can act outside their intended permissions
A02
Security Misconfiguration Default configs, unnecessary features, verbose errors
A03
Software Supply Chain Failures Insecure third-party components, dependencies, and build pipelines
A04
Cryptographic Failures Weak/missing encryption exposing sensitive data
A05
Injection SQL, NoSQL, OS, LDAP injection via untrusted data
A06
Insecure Design Missing or flawed security design patterns
A07
Authentication Failures Broken auth, weak credentials, session issues
A08
Software or Data Integrity Failures Insecure deserialization, unsigned updates
A09
Security Logging and Alerting Failures Insufficient logging to detect/respond to breaches
A10
Mishandling of Exceptional Conditions Improper error/exception handling leading to info disclosure or failures
Got a suggestion, broken link, or want to contribute? Feel free to reach out!
Pull requests and issues are welcome!