kavklaw@llm ~ /learn

kavklaw@llm $ ./start_training.sh

Learning Path

Offensive, defensive, and full-spectrum security in 9 phases. Hands-on exercises, quizzes, interview prep, and a full box walkthrough. Pick a track and go.

🧭

Choose Your Path

Pick the track that matches your goals, or follow all three.

Red Team (Offensive)

Learn to think like an attacker. Penetration testing, exploitation, privilege escalation, and Active Directory attacks.

Phases: 0 → 1 → 2 → 3 → 4 → 5 → Capstone

Pentester Red Teamer Bug Bounty

Blue Team (Defensive)

Learn to detect, respond, and defend. Incident response, log analysis, threat detection, SIEM, and network monitoring.

Phases: 0 → 1 → 6 (Blue Team & Defense)

SOC Analyst IR Specialist Threat Hunter

Purple Team (Full Spectrum)

Both sides. How attackers operate AND how defenders detect them. The full picture.

Phases: All phases 0–7. Offensive → Defensive → Specializations

Purple Teamer Security Architect CISO Track

💡 Recommendation: Start with Phase 0 (Lab Setup) and Phase 1 (Foundations) regardless of track — they're prerequisites for everything else. After that, follow your color. Not sure? Go Purple. Knowing both sides makes you better at either one.

📍 Path Overview

Phase 0: Lab Setup 🔴✅🔵✅🟣✅ Phase 1: Foundations 🔴✅🔵✅🟣✅ Phase 2: Reconnaissance 🔴✅🔵📖🟣✅ Phase 3: Web Exploitation 🔴✅🔵📖🟣✅ Phase 4: System Exploitation 🔴✅🔵📖🟣✅ Phase 5: Active Directory 🔴✅🔵📖🟣✅ 🎯 Your First Box (Capstone) 🔴✅🔵📖🟣✅ Phase 6: Blue Team & Defense 🔴📖🔵✅🟣✅ Phase 7: Specializations & Career 🔴✅🔵✅🟣✅

✅ = Core for this track 📖 = Recommended reading

📖

All Phases

Click any phase to jump in. Following them in order works best.

Phase 0: Lab Setup

Install VMs, configure networking, build your hacking environment.

Phase 1: Foundations

Networking, Linux, web tech, and cryptography — the essentials everything else builds on.

Phase 2: Reconnaissance

Passive & active recon, OSINT, Nmap, DNS enumeration, and directory fuzzing.

Phase 3: Web Exploitation

SQL injection, XSS, SSRF, command injection, auth bypass, and Burp Suite.

Phase 4: System Exploitation

Reverse shells, privilege escalation on Linux & Windows, SUID, and post-exploitation.

Phase 5: Active Directory

Kerberoasting, BloodHound, NTLM relay, DCSync, Golden Tickets, and domain takeover.

Red Team Capstone: Your First Box

Put it all together — complete walkthrough from recon to root.

Take the Challenge →

Phase 6: Blue Team & Defense

Incident response, SIEM, log analysis, threat detection, and network monitoring.

Phase 7: Career Paths

Certifications (OSCP, CEH, BTL1), interview prep, resume building, and specializations.