CYBER LIBRARY
Explore the bootcamp
← All learning paths
TEST WITH PURPOSE

Think like an ethical tester

Start with permission, build a lab, and turn findings into improvements. Follow the sequence or open any note that catches your interest.

9 connected notes27 min reading
01
MILESTONE 1 OF 3

Permission & preparation

0/3 read
  1. 01
    Adversarial thinking · 3 min

    Rules of engagement

    Define exactly what testing is authorized and how to handle unexpected events.

  2. 02
    Adversarial thinking · 3 min

    Virtual security labs

    Create an isolated environment for learning without exposing vulnerable systems.

  3. 03
    Adversarial thinking · 3 min

    Kali Linux

    A tool distribution is a platform for authorized work, not a substitute for fundamentals.

02
MILESTONE 2 OF 3

Explore the surface

0/3 read
  1. 04
    Adversarial thinking · 3 min

    Reconnaissance

    Build a target model before choosing active assessment steps.

  2. 05
    Adversarial thinking · 3 min

    Port scanning

    Observe service reachability from one network position at one time.

  3. 06
    Connected systems · 3 min

    HTTP and HTTPS

    Understand HTTP requests, methods, responses, and status codes while separating web semantics from encryption and application authorization.

03
MILESTONE 3 OF 3

Validate & report

0/3 read
  1. 07
    Adversarial thinking · 3 min

    OWASP Top 10

    Use the OWASP Top 10:2025 as a versioned awareness guide, then turn relevant categories into application-specific requirements and evidence.

  2. 08
    Adversarial thinking · 3 min

    DVWA

    A deliberately vulnerable application for isolated, authorized learning.

  3. 09
    Adversarial thinking · 3 min

    Reporting security assessments

    Translate a controlled finding into a fix that an owner can validate.

Keep connecting the dots.

Follow another path or take your next question into the library.

Find your next direction
Start with a concept. Follow its connections.
Detection & responseAbuse Elevation Control MechanismElevation-control abuse bypasses or misuses mechanisms governing privileged execution.Making change happenAcceptance criteriaDefine observable conditions for a deliverable to be accepted.Security essentialsAccess controlUnderstand subjects, resources, permissions, and enforcement through a shared-drive example, including how access changes over time.Detection & responseAccess Token ManipulationAccess token manipulation changes or adopts operating-system security contexts.Risk & resilienceAccount Access RemovalAccount access removal disrupts legitimate users by changing, deleting, or restricting their identities.Evidence & investigationAccount DiscoveryAccount discovery enumerates identities available in a system or environment.Detection & responseAccount ManipulationAccount manipulation changes identity settings to preserve or expand access.Adversarial thinkingAcquire InfrastructureInfrastructure acquisition obtains domains, servers, or other resources used to support operations.Adversarial thinkingActive ScanningActive scanning probes target infrastructure to learn reachable services or weaknesses.Security essentialsAdversary in the middleAn intermediary may observe or alter a communication path.Security essentialsAESA symmetric block cipher whose safe use depends on its mode and implementation.Making change happenAgile deliveryUse short feedback cycles to adapt toward a useful outcome.
ESC to close Searches titles and note content