Learn authorized offensive security step-by-step—from Linux & networking recon to PortSwigger web labs, TryHackMe rooms, privilege escalation, and executive reporting.
Minimum: 4GB–8GB RAM laptop with Chrome/Firefox (use TryHackMe AttackBox & PortSwigger browser labs without local VMs).
Recommended: Intel i5 / Ryzen 5, 16GB RAM, 512GB SSD for running Kali Linux VM, Burp Suite, and Nmap locally.
Free Cloud Option: TryHackMe AttackBox, PortSwigger Academy & OverTheWire SSH — run safely in browser without risking your host OS.
Phone-Friendly Start
You can practice OverTheWire Bandit on Android via Termux SSH (Steps 1–2), but web proxying & exploitation labs require a laptop.
Internet: 3–5 Mbps for browser labs, Burp updates, and VPN connections.
Hardware / Kit: None required — strictly test only authorized lab targets (never real systems without written permission).
Zero prior experience required — core concepts & first hands-on builds.
Understand rules of engagement, authorized testing boundaries, and passive OSINT reconnaissance.
Use bash, SSH, permissions, grep/awk, and Python one-liners efficiently in security labs.
Build real multi-part projects, tooling fluency, and problem-solving speed.
Discover open ports, service versions, SMB/HTTP/SSH banners, and misconfigurations.
Intercept HTTP traffic with Burp Suite and exploit/patch OWASP web vulnerabilities.
Production patterns, architecture, automation, and security rigor.
Validate CVEs responsibly, chain low-severity bugs, and understand payload mechanics.
Audit SUID binaries, sudo rules, weak service permissions, and kernel misconfigurations.
Scale, observability, testing, leadership, and real-world deployment.
Assess REST/GraphQL APIs, JWTs, cloud IAM misconfigurations, and AD lateral movement.
Write clear executive summaries, CVSS scores, reproduction steps, and remediation guidance.
Score 80% or higher (5 scenario questions) + submit your real practical capstone project after at least 7 days of study to earn a Verified MESHLUMA Certificate.
Tests are given after studying all 8 steps to prove real practical mastery.
Sign In to Track Study & Unlock Test