Learn offensive security.
Properly.
Hands-on security courses for people who want to understand how systems actually break — and how to secure them. 33 modules, 143 rooms and 1,044 tasks, tracked entirely in your browser.
No account. No analytics. Nothing leaves this device.
Continue where you left off
Everything below is read from this browser. Clear your storage and it resets — nothing is kept anywhere else.
Your learning journey starts here.
Pick a path below and the platform will keep your place, your notes and your highlights from here on.
Security learning paths
Structured paths from fundamentals to advanced offensive security. Work through them in order, or jump straight to the room you need.
Jr. Penetration Tester
The full offensive security path — reconnaissance, scanning, exploitation, privilege escalation, Active Directory and professional reporting.
Web Application Pentesting
Attack modern web applications through authentication flaws, injection vulnerabilities, client-side attacks, request smuggling and framework-level weaknesses.
AI Security
Understand how modern AI systems fail and how to defend them against prompt injection, data poisoning, model supply-chain attacks and AI-specific threats.
Advanced Web Application Red Teaming
Advanced offensive web tradecraft including cryptographic failures, custom Python tooling, vulnerability chaining, WAF bypass techniques and attacks against LLM-backed applications.
Progress worth keeping
Quiet markers for real work — earned as you complete tasks, clear rooms and keep coming back.
First Blood
Complete your first task.
Recon Specialist
Finish a reconnaissance room.
Field Notes
Write ten notes while you work.
Room Cleared
Complete every task in a room.
Web Hunter
Clear a web application vulnerability room.
Privilege Escalation
Complete a privilege escalation room.
Seven Days
Study seven days in a row.
Module Complete
Finish an entire module.
Total Recall
Grade fifty review cards.
Path Complete
Finish a whole learning path.
Your learning stays yours.
There is no backend. The site is static files; every byte of your progress is written to this browser's local storage and read back from it.
No account
Start learning without registration, email or password.
No tracking
No analytics, no cookies, no behavioural telemetry, no third-party scripts.
Local first
Progress, notes, highlights and review schedules never leave the device.