YanoSec
Progress0 of 152 lessons complete

Practice

External practice resources with recommended reading. Follow each platform's rules and use only its assigned targets. This course does not provide their solutions.

Command line

  1. 01OverTheWire BanditOptional remote command-line practice for beginners. Use only the game's assigned accounts and levels, keep credentials private, and read its rules and connection instructions. YanoSec does not provide level solutions.

    Recommended first find, grep, file, strings, and which

  2. 02pwn.college, Getting StartedOptional practice alongside the command-line lessons. Start with the platform's introductory instructions, then Linux Luminarium. Check account and workspace requirements; use the assigned challenge environment.

    Recommended first What a command is

Code

  1. 01CryptoHack, introductionOptional encoding and XOR challenges to try alongside the first Python lessons. Start with Introduction to CryptoHack and check how accounts and answer submission work. Later mathematics courses are not required for YanoSec.

    Recommended first Binary, hex, Base64, and URL encoding

Web security

  1. 01PortSwigger Web Security AcademyOptional web security labs. Choose a beginner lab for a topic you have studied, read its setup, and test only the assigned instance. YanoSec explains the ideas without providing these lab solutions.

    Recommended first SQL injection

  2. 02OverTheWire NatasOptional server-side web security levels after the SQL injection and authentication lessons. Follow the platform's level instructions and rules; permission applies to its designated challenge sites.

    Recommended first Authentication failures

Crypto and files

  1. 01CryptoHack coursesOptional cryptography study: begin with Introduction, then try the early symmetric or public-key topics when ready. Those courses may need additional mathematics. Check prerequisites before choosing a challenge.

    Recommended first Block ciphers and the ECB picture

  2. 02OverTheWire KryptonOptional cryptography practice alongside the classical-cipher lessons. Read the game's starting instructions, tools and rules before connecting; YanoSec does not supply its level answers.

    Recommended first Classical ciphers

  3. 03CyLab Security AcademyOptional challenge practice from the platform formerly known as picoCTF. Look for beginner cryptography and forensics topics, then check account requirements, challenge instructions and current rules.

    Recommended first Magic bytes and lying file extensions

Reversing

  1. 01OverTheWire LeviathanOptional program-analysis challenges after the command-line and reversing lessons. Check the tools each level needs and use the designated game account. Reading YanoSec's models does not replace practice with real binaries.

    Recommended first file, strings, and strace

Pwn

  1. 01pwn.college beltsOptional deeper practice after the introductory platform work and YanoSec's reversing and memory models. Follow the platform's current curriculum and prerequisites; the belt system records progress through its challenges.

    Recommended first Memory and the stack, as a picture

  2. 02OverTheWire NarniaOptional binary exploitation practice when you can use assembly and debugging tools. These tasks go beyond YanoSec's memory models. Follow the game rules and work only in its designated levels.

    Recommended first What a buffer overflow is

  3. 03OverTheWire BehemothOptional later challenges involving coding errors such as buffer overflows and race conditions. Build practical binary-analysis skills first, then follow the platform's setup and target limits.

    Recommended first What NX, ASLR, stack canaries, and PIE stop

  4. 04OverTheWire UtumnoOptional advanced wargame practice after easier program-analysis challenges. Read the platform's progression advice and rules, and use only the designated game accounts and targets.

    Recommended first What NX, ASLR, stack canaries, and PIE stop

  5. 05OverTheWire MazeOptional advanced challenges requiring programming, reverse engineering and exploitation skills. Read the level setup and platform rules; YanoSec's introductory Pwn stage alone is not practical preparation for these tasks.

    Recommended first What NX, ASLR, stack canaries, and PIE stop

Another voice

  1. 01TryHackMe Pre SecurityAn optional alternative explanation of computer, command-line, network, web and security basics. Check the current syllabus, account needs and any subscription requirements before starting.

    Recommended first What cybersecurity is

  2. 02TryHackMe Junior Penetration TesterOptional further study of authorized testing, from reconnaissance to reporting. Check prerequisites, account needs and any subscription requirements. Follow each assigned lab's scope; YanoSec does not provide room solutions.

    Recommended first The shape of a test

  3. 03Hack The Box Academy, Information Security FoundationsAn optional alternative course on computer and security foundations. Check the current modules, account requirements and price before enrolling; access to this external platform is separate from YanoSec.

    Recommended first What cybersecurity is