Web Security Foundations
From "I have used a browser" to reading a request, changing it on purpose, and finding the first real access-control bug. Free, in order, with a lab for each idea.
PentestingHere
Free, ordered lessons from the platform: how the web works, how it breaks, and a lab to try each idea on. Start at the top.
Earn a certificate. Finish every lesson and solve every lab on a path, or on every path of a track, and claim a certificate with your name and a QR code anyone can scan to check it. A track earns one certificate for all of its paths.
From "I have used a browser" to reading a request, changing it on purpose, and finding the first real access-control bug. Free, in order, with a lab for each idea.
PentestingHere
A complete, free curriculum for the skills an entry-level web-pentest certification assesses: recon, access control, injection, server-side attacks, and the engagement. Built on OWASP WSTG; unaffiliated with any exam vendor.
PentestingHere · Open track →