Training and Resources

Beginner Training

  • https://github.com/jassics/security-study-plan - Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

    • For complete newbies, start here.

  • EC Council Essential's Series - The Essential Series includes three courses, each covering essential skills in Network Defense, Ethical Hacking, and Digital Forensics. This introductory course series is designed for today's entry-level careers in information security, network defense, and digital forensics and is ideal for learners aspiring to pursue a career in cybersecurity.

  • Cisco Networking Academy: Intro to Cyber Security - Learn how to protect your personal data and privacy online and in social media, and why more and more IT jobs require cybersecurity awareness and understanding. Receive a certificate of completion.

  • Cisco Netwoking Academy: Cyber Security Essentials - Foundational knowledge and essential skills for all cybersecurity domains, including info security, systems sec, network sec, ethics and laws, and defense and mitigation techniques used in protecting businesses.

  • https://www.hoppersroppers.org/training.html - The training portion of the site is designed to teach core competencies and more importantly, provide a wide base of knowledge on how to find and use the resources available.

  • MICS - Introduction to Cyber Security - MICS teaches entry-level cyber security skills in domains such as open-source intelligence, security tools, operational security, network reconnaissance and threat hunting. Students who have successfully achieved their MICS Certification from MCSI can apply for winter/summer internships worldwide with the confidence that they have the competencies the industry is seeking.

  • https://www.mandiant.com/mandiant-gives-back/free-cyber-defense-training - Access free on-demand cyber defense training courses to advance your understanding of the six critical functions of cyber defense and learn how to activate them in your organization. This expert training is based on a new book published by Mandiant, titled The Defender’s Advantage, written by frontline cyber security experts from Mandiant’s strategic consulting and threat intelligence teams.

Networking

Cryptography

Role and Career Resources

Certifications

This goes perfectly between Career resources and Training material as cyber certifications cover both. As a rule of thumb, start with getting certifications that qualify you for the job you want. Then pursue other certifications or training depending on what skill set you wish to grow. Combine certification based training with the below resources for optimal growth.

pageCyber Security Certifications

General Cyber Training/Reference

Resource Collections

  • https://ippsec.rocks/?# - Amazing resource from a hacker with an incredible amount of content. Not only does IPPSEC have a ton of youtube content on various cyber topics, they even have a search engine like tool for looking for resources around any topic you search for.

  • Infosec_Reference - The only other reference with enough material to rival my own.

Reference Materials and Articles

General Security Platforms and Courses

  • TryHackMe - Bite sized gamified lessons on various offensive and defensive topics.

  • https://academy.attackiq.com/ - Free courses taught by cybersecurity practitioners at the cutting edge of the field, students gain realistic, hands-on experience in building a threat-informed defense to improve cybersecurity effectiveness.

  • https://www.thecybermentor.com/ - The platform of the Cyber Mentor. This site offers both free and premium training material and even their own practical penetration testing certification.

  • https://www.udemy.com/ - Video learning platform with thousands of courses on various topics. Look for the security related topics and sort bby popularity.

  • https://www.cybrary.it/ - Cybrary is the fastest growing, fastest-moving catalog in the industry. By working with an elite community of instructors, experts, and thought leaders, as well as cutting edge hands-on learning providers, we deliver relevant and high-quality content that is accessible anytime, anywhere.

  • http://www.securitytube.net/ - Like youtube for security videos. The content is great and they have a helpful forum as well.

  • https://defendtheweb.net/ - Defend the Web is an interactive security platform where you can learn and challenge your skills.

The Awesome Lists - Massive collections of resources on various cyber topics.

pageThe Awesome Lists

Practical Hands-on and CTFs

These sections have guides on how to practice your offensive an defensive skills in either a hosted CTF/CTF style platform, or even how to build everythingyou need in a local environment.

pagePractice LabpageCTF

Blue Team Training

  • Blue Team Labs Online » SECURITY BLUE TEAM - A new CTF style learning platform focused on blue teaming. They offer certification tracks for thier platform and are adding more content daily.

  • https://cyberdefenders.org/ - CyberDefenders is a training platform focused on the defensive side of cybersecurity, aiming to provide a place for blue teams to practice, validate the skills they have, and acquire the ones they need.

  • TryHackMe - Bite sized gamified lessons on various offensive and defensive topics.

  • Applied Network Defense - Fantastic sets of courses by some of the best defenders in the industry.

DFIR Training

Red Team Training

Web Application Testing Training

  • All learning materials | Web Security Academy - This platform has replaced the Web Application Hackers Handbook as the go to learning resource for web application knowledge. Huge list of attacks, resources, and documentation on how to exploit or defend them. There are also amazingly handy hands on labs that you can complete with the community version of Burp!

  • crAPI - completely ridiculous API (crAPI) will help you to understand the ten most critical API security risks. crAPI is vulnerable by design, but you'll be able to safely run it to educate/train yourself.

Books and Reading

pageBooks and Reading

Training Blogs

Check these every day for new tools and tactics for offensive and defensive security.

Workshops and Conventions

  • ConCollector - An awesome tool that allows you to parse content from thousands of secrity Cons.

  • Hacker Summer Camp

    • DEF CON - The one, the only. The biggest hacker conference in the world.

    • Blackhat - Defcon with a suit and tie. Tons of great learning but more focused around industry connections.

  • B-Sides - Localized security conventions all across the world.

Misc

Useful Gits

Youtube Channels