OWASP
Free · Books · OfficialOWASP Top 10 for LLM Applications ↗
Pairs with LLM jailbreak defense playbook and AI labs.
Level: Intermediate · Topic: AI Security
Supplements CYNARKS
Part of Resources — curated external links — each card names which CYNARKS lesson it supplements.
Curated, not random links
Academy library
PortSwigger, TryHackMe, OWASP, MITRE, NIST, and CTF resources — filter by free/paid, level, format (docs / labs / videos / books), topic, and official vs community. External sites are optional deep practice after CYNARKS Labs. OSINT ethics: OSINT center.
Showing 45 of 45 · Primary curriculum stays under Courses / Labs
AI Security
AppSec
OWASP
Free · Documentation · OfficialOWASP ASVS ↗
AppSec / product security verification checklist.
Level: Intermediate · Topic: AppSec
Supplements CYNARKS
Blue Team
TryHackMe
Paid/Freemium · Path · CommunitySOC Level 1 ↗
Alert triage and SIEM practice aligned to our SOC path.
Level: Beginner → Intermediate · Topic: Blue Team
Supplements CYNARKS
TryHackMe
Paid/Freemium · Path · CommunityBlue Team pathway rooms ↗
Continue SOC/DFIR after in-browser log-hunt labs.
Level: Intermediate · Topic: Blue Team
Supplements CYNARKS
CTF Platforms
picoCTF
Free · CTF · CommunitypicoCTF ↗
Legal beginner CTFs after our in-app practice flags.
Level: Beginner · Topic: CTF Platforms
Supplements CYNARKS
OverTheWire
Free · CTF · CommunityOverTheWire Bandit ↗
SSH-based Linux skills ladder.
Level: Beginner · Topic: CTF Platforms
Supplements CYNARKS
Hack The Box
Paid/Freemium · CTF · CommunityHack The Box ↗
Machine-based practice once fundamentals are solid.
Level: Intermediate → Advanced · Topic: CTF Platforms
Supplements CYNARKS
Fundamentals
TryHackMe
Paid/Freemium · Path · CommunityPre Security path ↗
Networking + Linux foundations before offensive rooms.
Level: Beginner · Topic: Fundamentals
Supplements CYNARKS
TryHackMe
Paid/Freemium · Path · CommunityCyber Security 101 ↗
Broad intro path alongside our roadmap levels.
Level: Beginner · Topic: Fundamentals
Supplements CYNARKS
TryHackMe
Free · Labs · CommunityLinux Fundamentals ↗
After our commands + OS fundamentals roadmap.
Level: Beginner · Topic: Fundamentals
Supplements CYNARKS
TryHackMe
Free · Labs · CommunityNetwork Fundamentals / Security ↗
Pairs with networking roadmap + packet labs.
Level: Beginner · Topic: Fundamentals
Supplements CYNARKS
Hardening
Center for Internet Security
Free · Documentation · CommunityCIS Benchmarks ↗
System hardening baselines for Linux/Windows/cloud study.
Level: All · Topic: Hardening
Supplements CYNARKS
Identity
TryHackMe
Free · Path · CommunityActive Directory basics (THM paths) ↗
After Identity labs + AD roadmap level.
Level: Intermediate · Topic: Identity
Supplements CYNARKS
Mobile
OWASP
Free · Path · OfficialOWASP MASVS ↗
Mobile career path + mobile labs.
Level: Intermediate · Topic: Mobile
Supplements CYNARKS
Offensive
TryHackMe
Paid/Freemium · Path · CommunityJr Penetration Tester ↗
Structured pentest path after CYNARKS ethical hacking course.
Level: Beginner → Intermediate · Topic: Offensive
Supplements CYNARKS
TryHackMe
Free · Labs · CommunityIntro to Web Hacking ↗
HTTP, cookies, and basic web attacks after CYNARKS Labs.
Level: Beginner · Topic: Offensive
Supplements CYNARKS
OSINT & Recon
OSINT Framework
Free · Documentation · CommunityOSINT Framework ↗
Category tree of OSINT resources — pair with Learn /osint lanes.
Level: All · Topic: OSINT & Recon
Supplements CYNARKS
Bellingcat
Free · Documentation · CommunityBellingcat investigation resources ↗
Image/geo verification and responsible publishing.
Level: Intermediate · Topic: OSINT & Recon
Supplements CYNARKS
OSINT Dojo
Free · Documentation · CommunityOSINT Dojo ↗
Structured exercises for passive recon skills.
Level: Beginner → Intermediate · Topic: OSINT & Recon
Supplements CYNARKS
Community
Free · Documentation · CommunityAwesome OSINT (GitHub) ↗
Curated mega-list — use with ethics section on /osint.
Level: All · Topic: OSINT & Recon
Supplements CYNARKS
Standards
OWASP
Free · Documentation · OfficialOWASP Top 10:2025 ↗
Current canonical web risk categories for reporting language (2021 is historical).
Level: All · Topic: Standards
Supplements CYNARKS
OWASP
Free · Documentation · OfficialOWASP Cheat Sheet Series ↗
Remediation-ready guidance for developers.
Level: All · Topic: Standards
Supplements CYNARKS
MITRE
Free · Documentation · OfficialMITRE ATT&CK ↗
Map detections and adversary behaviours.
Level: Intermediate · Topic: Standards
Supplements CYNARKS
NIST
Free · Documentation · OfficialNIST Cybersecurity Framework ↗
Governance language for risk conversations.
Level: All · Topic: Standards
Supplements CYNARKS
MITRE
Free · Documentation · OfficialATT&CK Navigator ↗
Visual coverage mapping for blue-team study.
Level: Intermediate · Topic: Standards
Supplements CYNARKS
NIST
Free · Labs · OfficialNIST SP 800-61 Incident Handling ↗
IR lifecycle depth after our SOC/IR labs.
Level: Intermediate · Topic: Standards
Supplements CYNARKS
Tool Documentation
Nmap
Free · Books · CommunityNmap Reference Guide ↗
Official scanner reference — knowledge only inside Learn tools.
Level: All · Topic: Tool Documentation
Supplements CYNARKS
Wireshark
Free · Labs · CommunityWireshark User's Guide ↗
Packet analysis reference after our in-browser packet lab.
Level: All · Topic: Tool Documentation
Supplements CYNARKS
Web Application Security
PortSwigger Web Security Academy
Free · Labs · OfficialCross-site scripting (XSS) ↗
Gold-standard free labs for reflected/stored/DOM XSS.
Level: Beginner → Advanced · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialSQL injection ↗
Hands-on SQLi with increasing difficulty — pairs with our in-browser SQLi sim.
Level: Beginner → Advanced · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialAccess control vulnerabilities ↗
IDOR and broken access control practice.
Level: Intermediate · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialServer-side request forgery (SSRF) ↗
Cloud metadata and internal SSRF patterns.
Level: Intermediate · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialAuthentication vulnerabilities ↗
Password reset, 2FA bypass, and session flaws.
Level: Intermediate · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialFull Web Security Academy catalog ↗
Complete free topic index — use after CYNARKS web path.
Level: All · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialCross-site request forgery (CSRF) ↗
Pairs with our in-browser CSRF defense lab.
Level: Intermediate · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialXML external entity (XXE) injection ↗
XML parser abuse — after CYNARKS injection topics.
Level: Intermediate · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialJWT attacks ↗
Deepen after our JWT segment lab.
Level: Intermediate → Advanced · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialFile upload vulnerabilities ↗
Matches our vulns knowledge base entry.
Level: Intermediate · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialDirectory traversal ↗
After the in-browser traversal pattern lab.
Level: Beginner → Intermediate · Topic: Web Application Security
Supplements CYNARKS
TryHackMe
Free · Labs · CommunityWeb Fundamentals ↗
HTTP/cookies/JS baseline before PortSwigger deep dives.
Level: Beginner · Topic: Web Application Security
Supplements CYNARKS
TryHackMe
Free · Labs · CommunityOWASP Top 10 ↗
Room-style walkthrough of Top 10 categories.
Level: Beginner · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialCORS ↗
After our CORS misconfiguration vuln entry.
Level: Intermediate · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialServer-side template injection ↗
Pairs with SSTI in vulns knowledge base.
Level: Advanced · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialRace conditions ↗
Logic flaw depth after access-control labs.
Level: Advanced · Topic: Web Application Security
Supplements CYNARKS
PortSwigger Web Security Academy
Free · Labs · OfficialJWT attacks ↗
Pairs with JWT misuse in our vulns catalog.
Level: Advanced · Topic: Web Application Security
Supplements CYNARKS