Skill
Vulnerability assessment
Find, rank, and report issues. A scanner without a brain is noise.
Do these first
What you will be able to do
- Reproduce a finding manually
- Score impact vs likelihood
- Write a report a developer can act on
Curated resources
Start with the pick, then branch out
Scores are LearnPath editorial opinions (clarity, cost, freshness, project density) — not an objective ranking. Every YouTube item is embedded officially after a click-to-load facade.
Project-based
LearnPath pickinteractiveintermediate
PortSwigger Web Security Academy — XSS
PortSwigger2h
Legal labs. Never test systems you do not own or have written permission to test.
Score 96
OpenOfficial docs
Official docsdocumentationintermediate
OWASP Top 10
OWASP1h 30m
Memorize the classes of bugs, then exploit them only in legal labs.
Score 96
Open
3h 36mLearnPath pickMore curatedyoutube videointermediate
Hands-On Cybersecurity and Ethical Hacking – Full Course
freeCodeCamp.org3h 36m
Three and a half hours published February 2026 doing hands-on offensive work in legal labs — reconnaissance, scanning, exploitation and reporting. Current tooling, and it keeps the legal and ethical boundary explicit throughout.
Score 86
Watch
12h 17mMore curatedyoutube courseintermediate
Ethical Hacking in 12 Hours - Full Course - Learn to Hack!
The Cyber Mentors12h 17m
Twelve hours of practical ethical-hacking instruction with a lab-heavy structure, covering reconnaissance through exploitation and post-exploitation. The classic long course in this category.
Score 83
Watch