Library · practice
Penetration testing
Test systems the way an attacker would, but with permission and a method: scope and authorise, recon, find and confirm weaknesses, and report them so they get fixed.
Penetration testing appeared in 54% of the Cybersecurity Engineer job descriptions we read, and 82% of the junior ones. This shelf teaches the discipline: authorisation, methodology and reporting. It is written for authorised testing only.
Practise hands-on techniques exclusively on systems built for learning, such as OWASP Juice Shop (which you run yourself), PortSwigger Web Security Academy, TryHackMe or Hack The Box, or targets you own with written permission. Testing systems you are not authorised to test is a crime under laws such as India's Information Technology Act.
Beginner lessons for Penetration testing are being written.
Advanced lessons for Penetration testing are being written.