Learn authorized offensive security step-by-step—from Linux & networking recon to PortSwigger web labs, TryHackMe rooms, privilege escalation, and executive reporting.
Minimum: 4GB–8GB RAM laptop with Chrome/Firefox (use TryHackMe AttackBox & PortSwigger browser labs without local VMs).
Recommended: Intel i5 / Ryzen 5, 16GB RAM, 512GB SSD for running Kali Linux VM, Burp Suite, and Nmap locally.
Free Cloud Option: TryHackMe AttackBox, PortSwigger Academy & OverTheWire SSH — run safely in browser without risking your host OS.
Phone-Friendly Start
You can practice OverTheWire Bandit on Android via Termux SSH (Steps 1–2), but web proxying & exploitation labs require a laptop.
Internet: 3–5 Mbps for browser labs, Burp updates, and VPN connections.
Hardware / Kit: None required — strictly test only authorized lab targets (never real systems without written permission).
Scale, observability, testing, leadership, and real-world deployment.
Assess REST/GraphQL APIs, JWTs, cloud IAM misconfigurations, and AD lateral movement.
Write clear executive summaries, CVSS scores, reproduction steps, and remediation guidance.
Score 80% or higher (5 scenario questions) + submit your real practical capstone project after at least 7 days of study to earn a Verified MESHLUMA Certificate.
Tests are given after studying all 8 steps to prove real practical mastery.
Sign In to Track Study & Unlock Test