Typorithm learning path
Cybersecurity
Security as a craft — fundamentals, penetration testing, OSINT, and doxxing defense.
Your learning path
0 of 111 topics completed
Saved on this device
Unit 1 · 3 topics
Foundations
The mental models security is built on — the CIA triad and AAA, STRIDE threat modeling, and defense in depth, least privilege, and zero trust.
Unit 2 · 3 topics
Cryptography
Applied crypto with openssl — hashing and HMAC, symmetric vs asymmetric keys, and TLS with PKI and certificate chains.
Unit 3 · 3 topics
Network Security
Defending the wire — authorized nmap scanning, stateful firewalls with iptables, and IDS/IPS with packet analysis.
Unit 4 · 3 topics
Web Security (OWASP)
The OWASP classics with vulnerable-vs-safe code — SQL injection, XSS, and CSRF with hardening security headers.
Unit 5 · 3 topics
Auth & Identity
Authentication done right — password hashing with bcrypt/argon2, JWTs and sessions, and OAuth2 with OIDC.
Unit 6 · 3 topics
Blue Team & SOC
Detection and response — logging into a SIEM, mapping detections to MITRE ATT&CK, and the incident-response lifecycle.
Unit 7 · 3 topics
Offensive (Authorized)
Authorized, scoped testing — pentest methodology, recon and enumeration, and privilege escalation with the matching hardening.
Unit 8 · 3 topics
Cloud Security
Securing the cloud — IAM least privilege, secrets management with a vault, and container and image hardening.
Unit 9 · 3 topics
Security Interview
Prep for a security role — the core concepts interviewers ask, scenario/judgment questions, and certifications and career paths.
Unit 10 · 3 topics
Compliance & Privacy
Baseline awareness every security pro needs — GDPR and privacy laws, HIPAA/PCI-DSS/SOX, and ISO 27001/SOC 2/NIST frameworks.
Unit 11 · 3 topics
Engagement
Rules of engagement and scoping, methodologies (PTES/NIST), and engagement types — the legal, structured foundation of every test.
Unit 12 · 3 topics
Recon & OSINT
Passive OSINT, active enumeration, and web recon — mapping the authorized attack surface before touching it.
Unit 13 · 3 topics
Scanning & Enum
nmap deep scanning, per-service enumeration, and vulnerability scanning — with manual validation of every finding.
Unit 14 · 3 topics
Web App Testing
The Burp Suite workflow, SQL injection with sqlmap, and IDOR/SSRF/XXE — each with its remediation.
Unit 15 · 3 topics
Exploitation
Metasploit, msfvenom payloads and reverse shells, and password cracking — validating real impact in scope.
Unit 16 · 3 topics
Privilege Escalation
Linux and Windows privilege escalation and pivoting — each misconfiguration mapped to its fix.
Unit 17 · 3 topics
Active Directory
The core of corporate tests — AD enumeration with BloodHound, Kerberoasting and relaying, lateral movement and DCSync.
Unit 18 · 3 topics
Wireless
Authorized wireless assessments with the aircrack-ng suite — recon, WPA handshake capture, and evil-twin/WPS.
Unit 19 · 3 topics
Reporting
The actual deliverable — findings with CVSS, report structure, and remediation with retest.
Unit 20 · 3 topics
Foundations
The intelligence cycle, ethics and legal authorization, and investigator OPSEC — the discipline behind professional OSINT.
Unit 21 · 3 topics
Search & Discovery
Google dorking, specialized engines (Shodan, Censys), and archives and cached data.
Unit 22 · 3 topics
Domain & Infrastructure
WHOIS and DNS, certificate transparency and subdomains, and infrastructure mapping — the external attack surface.
Unit 23 · 3 topics
Corporate Footprint
Authorized exposure assessment — company footprint, username enumeration, and breach and credential exposure.
Unit 24 · 3 topics
Media & Geolocation
Media verification — reverse image search, EXIF metadata, and geolocation as a journalism/CTF discipline.
Unit 26 · 3 topics
Frameworks & Automation
OSINT frameworks, Maltego link analysis, and API automation — organizing and scaling collection.
Unit 27 · 3 topics
Geospatial (GEOINT)
Satellite and aerial imagery, maps and OpenStreetMap, and flight/ship tracking — geospatial verification.
Unit 28 · 3 topics
Business & Financial
Corporate registries, beneficial ownership and sanctions, and blockchain tracing — due diligence and AML.
Unit 29 · 3 topics
Dark Web & Breach Intel
Dark web concepts, leak and forum monitoring, and threat-actor tracking — defensive threat intelligence.
Unit 30 · 3 topics
Missing Persons
Humanitarian OSINT — the Trace Labs method, last-seen timeline analysis, and working ethically with families and NGOs.
Unit 31 · 3 topics
Conflict Monitoring
Open-source conflict documentation for journalism and accountability — event verification, satellite analysis, and the Berkeley Protocol.
Unit 32 · 3 topics
Footprint Defense
The defensive side — reduce your footprint (anti-doxxing), monitor your exposure, and use OSINT for threat intel.
Unit 33 · 3 topics
Email & Phone
Email and phone intelligence for authorized investigations — verification, footprinting, and identity correlation on public data.
Unit 34 · 3 topics
Disinformation
Detecting coordinated inauthentic behavior, mapping narratives, and deepfake/media forensics — protecting the information space.
Unit 35 · 3 topics
Threat Awareness
How doxxing works (for defense), your personal attack surface, and the ethics and law — the basis for protecting people.
Unit 36 · 3 topics
Hardening
Remove your footprint, compartmentalize identities, and harden accounts and devices against takeover.
Unit 37 · 3 topics
Monitoring & Response
Monitor for exposure, respond if you're doxxed (evidence, takedowns, escalation), and protect high-risk people.