Cybersecurity, learned like a practitioner.

24 learning paths · 398 modules live · every lesson written by someone who has shipped the control or run the engagement. Free to start.

24
Learning paths
398+
Live modules
0
You've completed
Free
Your tier
Browse the academy

Expert · modules

Modules tagged Expert. Use the sidebar to narrow by track or topic.

33 results · Page 3/4
Attacker Mindset — Active Directory Expert Members

AD Detection — What Good Looks Like

Event IDs, Sigma rules, Defender for Identity, Sentinel KQL queries. From generic SIEM to mature AD detection.

Apr 22, 2026 90 min Open
Attacker Mindset — Network Expert Members

Why Network Detection Underperforms

Encrypted traffic, volume overload, alert fatigue. Why attacker dwell time is weeks to months on average.

Apr 22, 2026 90 min Open
Attacker Mindset — Web Expert Members

The Framework-Assumption Gap

'The framework handles it' is the most dangerous phrase in modern web security. Escape hatches, third-party integrations, and non-REST transports.

Apr 22, 2026 90 min Open
Web Application Penetration Testing Expert Members

Insecure Deserialization

Java/.NET/Python/PHP/Ruby deserialization vulns, gadget chains, ysoserial, signed-data defense.

Apr 22, 2026 120 min Open
Web Application Penetration Testing Expert Free

Race Conditions in Web Apps

TOCTOU, single-packet attacks, where races hide, Burp testing, transactional + idempotency-key defenses.

Apr 22, 2026 120 min Open
Web Application Penetration Testing Expert Members

Prototype Pollution

JS prototype model, pollution sources, attack vectors (auth bypass, RCE chains), Object.create(null) defense.

Apr 22, 2026 120 min Open
Active Directory Security Expert Members

Hybrid AD & ADFS Attack Surface

Entra Connect crown jewel, ADFS Golden SAML, PHS attacks, on-prem ↔ cloud lateral movement, Tier 0 isolation.

Apr 22, 2026 120 min Open
Web Application Penetration Testing Expert Members

HTTP Request Smuggling

CL.TE / TE.CL / TE.TE, HTTP/2 downgrade smuggling, exploitation impacts, detection via timing, defenses.

Apr 22, 2026 120 min Open
API Security Deep Dive Expert Members

API Gateways & Zero-Trust at Scale

Kong, Apigee, AWS API Gateway, service mesh (Istio, Linkerd), zero-trust architecture, observability stack.

Apr 22, 2026 150 min Open
IoT & OT Security Expert Members

IoT/OT Lab Walkthrough

Build a small ICS lab with OpenPLC, ScadaBR, run a complete assessment cycle, hardening, detection.

Apr 22, 2026 150 min Open
02 / Why learn here

Practitioners who've
shipped the controls.

Every module is written by someone who has built the defence or run the engagement. No repackaged tutorials, no generic theory.

Why learn here

01

Practitioner-written.

Each lesson is authored by someone who has shipped the control or run the engagement in production.

02

Quiz after every module.

20+ questions with explanations. 70%+ to mark complete. Unlimited retries.

03

Progress tracked.

Completions, scores and streaks saved automatically. Resume exactly where you left off.

04

India-priced.

Start free. ₹499/mo for intermediate. ₹4,999/yr for advanced. No hidden fees, ever.