Computer hardware, operating systems, filesystems, networking basics.
TCP/IP, ports, protocols, DNS, HTTP/HTTPS, firewalls.
Linux filesystem, permissions, package managers, bash commands.
Active Directory basics, services, registry, PowerShell.
Subnetting, routing, NAT, VPNs, proxies.
Ping sweeps, port scanning, banner grabbing.
Scripting, automation, payloads, scanners.
HTML, CSS, JavaScript, APIs, cookies, sessions.
SQL Injection, XSS, CSRF, IDOR, authentication flaws.
File upload attacks, command injection, logic flaws.
Privilege escalation, password cracking, misconfigurations.
WiFi cracking, WPA/WPA2, evil twin attacks.
Nmap, Burp Suite, Metasploit, Wireshark.
Custom scripts, exploit frameworks, scanners.
TryHackMe, HackTheBox, VulnHub challenges.
Real-world vulnerability hunting and reporting.