Topics
Every lesson by subject. The course page is the order to work through them; this is the index for when you already know what you are looking for.
Security
6How to think about security, and the habits that reduce what your device exposes.
- The security mindset
- Thinking in threats: modelling a system
- Passwords, keys and secrets
- Reading logs and spotting oddities
- Hardening your Termux setup
- Safe habits and privacy
Small tools you can build yourself, and the shell to build them with.
- Build a password generator
- Build an encoder and decoder
- Build a hash and checksum tool
- Build a JWT inspector
- Build a permissions calculator
- Build a subnet calculator
Web
6How a web application handles a request, and the bug classes that break it.
- HTTP and APIs from the shell
- How a web request is handled
- Input you do not control
- Injection: when data becomes code
- Cross-site scripting
- Broken access control and misconfiguration
Hashing, keys, certificates and signatures, and the mistakes that break them.
- Hashing, encoding and encryption are three different things
- Symmetric and asymmetric keys
- TLS and the chain of trust
- Signing and verifying a file
- Common crypto mistakes
Defence
5Baselines, file integrity, logs, alerting, and responding to an incident calmly.
- Baselines: writing down what normal is
- File integrity: noticing a change
- Reading logs for a story
- Alerting on your own device
- Incident response, in six steps
Python
5Python that runs in the page, from a print statement to the standard library.
- Working with text in Python
- Hashing and encoding in Python
- Addresses in Python
- Secrets and tokens in Python
- Run your first Python
Recon
5Finding out what is exposed on your own devices, and judging what you find.
- The phases of a security assessment
- Taking inventory of your own devices
- Reading a port scan properly
- Service versions and what they tell you
- Finding and judging a vulnerability
Career
4Writing findings, disclosing responsibly, and choosing what to learn next.
- Rules of engagement and the law
- Writing a finding someone can act on
- Responsible disclosure
- Certifications, labs and what they actually prove
Addresses, names, requests, and moving files between two machines.
All 4Shell
4Scripts, variables, processes and timers: making the shell do the work for you.
All 4Text
4Reading, searching, reshaping and encoding text with tools the shell already has.
- Reading and searching text
- Pipes and redirection
- Text processing with sed and awk
- Encoding and hashes
Paths, permissions and archives: where things live, and who can reach them.
All 3Projects
3Three guided builds that tie the earlier topics together.
All 3Termux
3The app itself: installing it, its packages, and shaping the shell you get.
All 3Not sure where to start?
Topics are for looking things up. If you are working through the material for the first time, the course puts them in an order where each lesson assumes only the ones before it.