Cybersecurity, learned like a practitioner.
24 learning paths · 398 modules live · every lesson written by someone who has shipped the control or run the engagement. Free to start.
Advanced · modules
Modules tagged Advanced. Use the sidebar to narrow by track or topic.
LLM Jailbreak Defence
Jailbreaks bypass model safety training. New variants constant. Common patterns Roleplay — “Pretend you are DAN (Do Anything Now)” Encoding — base64, ROT13, leetspeak Multi-turn — gradually shift context away from policy Character set tricks — Unicode confusables Adversarial suffixes (GCG) — discovered tokens that flip safety Crescendo — multi-turn gradient toward sensitive content Defences […]
AI Security Evaluations
How do you know if your AI is safe enough? Structured evaluation. Eval categories Adversarial robustness — does it resist attacks? Toxicity — does it produce harmful content? Bias — does it discriminate? Privacy — does it leak training data? Reliability — does it hallucinate? Capability — what can the model do that’s sensitive? Tools […]
Sentinel Deployment
Sentinel = Microsoft’s SIEM. Cloud-native, KQL-based, integrates with Defender suite. Architecture Log Analytics Workspace = data store Sentinel = analytics layer on top Connectors = data ingestion Workbooks = dashboards Analytics Rules = detections Playbooks = SOAR automation (Logic Apps) Top connectors Entra ID Microsoft 365 Defender XDR Azure Activity Azure AD audit logs Office […]
Azure Incident Response
Module 7 (Blue Team) covered IR generally. This is the Azure-specific actions. Compromised account playbook Disable user account in Entra ID Revoke active sessions and refresh tokens (Revoke-AzureADUserAllRefreshToken) Reset password Review AD audit logs for the user (last 30 days) Check for created service principals or app registrations Review M365 mailbox forwarding rules Review consent […]
VPC Service Controls
VPC Service Controls = GCP’s data-exfiltration defence. Define a perimeter; data can’t leave it even with valid credentials. The model Perimeter wraps GCP services + projects Inside perimeter: free communication Outside attempting to access services inside: blocked unless explicit ingress rule Inside attempting to send to outside: blocked unless explicit egress rule Common patterns Lock […]
Binary Authorization
Binary Authorization = admission controller for GKE/Cloud Run. Only deploy images that pass policy. How it works Build pipeline produces image + attestation (using Cloud KMS-signed key) Binary Auth policy specifies required attestations Deploy attempt: image checked against policy Match → allow; no match → deny Common policies “Image must be from this Artifact Registry” […]
Confidential Computing
Confidential Computing = data encrypted in use, not just at rest and in transit. Hardware-based memory encryption. GCP options Confidential VMs — based on AMD SEV-SNP or Intel TDX Confidential GKE Nodes — same hardware for K8s workloads Confidential Spaces — for multi-party computation Use cases Process sensitive data without exposing to cloud admin Multi-party […]
Quantum-Safe Cryptography Readiness
Quantum computers will break RSA and elliptic curve crypto. NIST published post-quantum standards in 2024. Migration is a multi-year project. The NIST winners ML-KEM (Kyber) — key encapsulation; replaces RSA-KEM and ECDH ML-DSA (Dilithium) — digital signatures; replaces RSA-PSS, ECDSA SLH-DSA (SPHINCS+) — alternative signature; stateless hash-based FN-DSA (Falcon) — compact lattice signatures “Harvest now, […]
Key Management at Scale
Crypto without good key management is decoration. Every breach has a “where did the keys live” question. The hierarchy of safety HSM (FIPS 140-3 Level 2-4) — most secure; keys never leave hardware Cloud KMS — managed; keys logically scoped; audit trails HashiCorp Vault — flexible; software-based; supports HSM backend Application-level keystore — least secure […]
IoT Firmware Analysis
IoT pentesting often starts with firmware. Extract, analyse, find vulns offline. Workflow # Identify firmware structure binwalk firmware.bin binwalk -e firmware.bin # extract everything # If squashfs / cpio extracted ls _firmware.bin.extracted/ # Look for /etc/passwd, /etc/shadow, /www/, hardcoded secrets # Static analysis on binaries ghidra (or radare2) # Emulate qemu-system-arm -kernel kernel.bin firmadyne / […]
Practitioners who've
shipped the controls.
Every module is written by someone who has built the defence or run the engagement. No repackaged tutorials, no generic theory.
Why learn here
Practitioner-written.
Each lesson is authored by someone who has shipped the control or run the engagement in production.
Quiz after every module.
20+ questions with explanations. 70%+ to mark complete. Unlimited retries.
Progress tracked.
Completions, scores and streaks saved automatically. Resume exactly where you left off.
India-priced.
Start free. ₹499/mo for intermediate. ₹4,999/yr for advanced. No hidden fees, ever.