Articles & Research

Tutorials, writeups and cheatsheets written by the community — for the community. Everything here is for learning and authorized security testing only.

Articles & Tutorials

Aug 10, 2026·7 min read

Getting Started with Web Application Penetration Testing

A beginner-friendly roadmap for breaking into web application pentesting, from lab setup to your first authorized engagement.

webpentestingbeginnersmethodologylab

Aug 16, 2026·6 min read

Burp Suite for Beginners: Intercepting Your First Request

Set up Burp Suite Community, intercept your first HTTP request, and start modifying traffic safely on your own lab targets.

burp-suiteproxyinterceptwebbeginners

Exploit Writeups

Aug 12, 2026·9 min read

OWASP Juice Shop: A Beginner Bug Bounty Walkthrough

Learn the bug bounty mindset by solving real vulnerability classes in OWASP Juice Shop, from scoring board to sensitive data exposure.

juice-shopbug-bountywalkthroughctfweb

PrivEsc Cheatsheets

Aug 15, 2026·6 min read

Linux Privilege Escalation Cheatsheet

A practical, ordered checklist for discovering privilege escalation paths on Linux systems during authorized penetration tests.

linuxprivesccheatsheetenumerationctf

OSINT & Recon Tools

Aug 14, 2026·6 min read

OSINT & Recon: Open Source Intelligence Basics

Learn how to gather publicly available information safely and ethically, and how to use it for reconnaissance in authorized security work.

osintreconreconnaissancepassiveinvestigation

OWASP Top 10 Guides

Aug 13, 2026·8 min read

OWASP Top 10 Explained for Beginners

The ten most critical web application security risks, explained simply and practically, with what each one looks like and how to avoid it.

owasptop-10websecuritybeginners