P14N

1. THM

2. certificate

   API PENETRATION TESTING	https://www.apisecuniversity.com/courses/api-penetration-testing
   Mobile APPLICATION PENETRATION TESTING	https://academy.tcm-sec.com/courses/enrolled/1557555
   WEB APPLICATION PENETRATION TESTING	https://academy.tcm-sec.com/courses/enrolled/1792341
   Python SCRIPTING	https://courses.davidbombal.com/courses/1170936/lectures/25346093
   NETWORK PENETRATION TESTING	https://app.cybrary.it/browse/course/offensive-penetration-testing
   WIRELESS NETWORKS PENETRATION TESTING	https://app.cybrary.it/profile/sudoninja?tab=cert-completion&cert=CC-972e8154-96fc-4979-8e1d-fd9407b693a8
   ACTIVE DIRECTORY PENETRATION TESTING	https://cyberwarfare.live/product/multi-cloud-red-team-analyst-mcrta/
   CLOUD PENETRATION TESTING(AWS, GCP and Azure)	https://cyberwarfare.live/product/multi-cloud-red-team-analyst-mcrta/
   Red Team	https://portal.cyberwarfare.live/products/certified-red-team-analyst
   IOT PENETRATION TESTING	expolit.io
   Thick client PENETRATION TESTING	Course: Offensive Thick Client Penetration Testing | Udemy
   SOURCE CODE REVIEW	Coursera - Secure Coding Specializations
   bug bounty	https://www.udemy.com/course-dashboard-redirect/?course_id=3927586
   	https://www.udemy.com/course-dashboard-redirect/?course_id=3766352
   LLM / AI penetration testing	https://www.udemy.com/course/llm-pentesting-red-teaming/?srsltid=AfmBOop0pbcOp6bddPw7CoYlOlTJGZXIRlb7VfqvFokC6_FFHCUv57IG&couponCode=CP130525
   	https://www.udemy.com/course/the-ultimate-ai-llm-penetration-testing-training-course/?srsltid=AfmBOoo48udLjry5EYNQx4bKYPP6Ab1W21qM1L2eg9So1nDVs4Z26GF1&couponCode=CP130525
   	https://portswigger.net/web-security/llm-attacks

3. Structured Cybersecurity Training Platforms

• CyberWarfare.live – Cyber warfare and security research training.

• TCM Security Academy – Affordable ethical hacking & cybersecurity courses.

• Cybrary – Cybersecurity and IT skills training platform.

• David Bombal Courses – Networking & cybersecurity courses.

• APIsec University – API security certifications.

• Mobile Hacking Lab – Mobile app hacking & pentesting.

• EduTA Mind Hacking – Cyber mindset and skill courses.

• Cybergita VAPT Mastery – Free professional VAPT training.

• EC-Council Learning – CEH & EC-Council certifications.

• LinkedIn Learning – Business, IT, and security training.

---

2. Practical Hacking Labs

• TryHackMe – SQL Injection Lab – Hands-on SQLi training.

• HackTheBox Academy – HTTPS/TLS Attacks – TLS attack lab.

• HackXpert Labs – Online cybersecurity labs.

• HackViser Labs – Security testing practice.

• Cyber Ranges – Cyber range exercises.

• Avatao – Developer-focused security challenges.

• TinyXSS – XSS practice playground.

---

3. Specialized Security Resources

• PortSwigger Account – Burp Suite community & resources.

• Pentest Arsenal – Pentesting tools & resources.

• HackRTB (Hack The Box B2C) – Access to HackTheBox labs.

---

4. General Tech & Development Learning

• OneByte Labs – General IT & security training.

• Udemy – WordPress Blogging in Hindi – Website creation in Hindi.

• ClassCentral – YouTube Penetration Testing Bootcamp – Free bootcamp.

4.Pentesting Labs Collection

1. Web Application Pentesting

• Web Application Labs – Vulnerable web apps for SQLi, XSS, CSRF, and other web security testing.

2. Network Pentesting

• Vulnerable Network Labs – Network exploitation labs for scanning, enumeration, and exploitation.

3. Mobile Application Security

• Vulnerable Mobile Apps – Android/iOS app hacking environments.

4. Active Directory (AD) Security

• Active Directory Labs – AD attack simulations for Kerberoasting, Pass-the-Hash, etc.

5. API Pentesting

• API Labs – REST/GraphQL API exploitation scenarios.

6. Source Code Review

• Mastering Source Code Analysis Labs – Vulnerable codebases for manual/static analysis practice.

7. IoT Security

• IoT Labs – Exploiting smart devices and embedded systems.

8. Red Teaming

• Build Your Own CTF Machine – Guide for creating custom CTF vulnerable environments.

9. Cloud Security

• Vulnerable Cloud Labs – Misconfigured AWS, Azure, GCP setups for exploitation.

10. Bug Bounty Practice

• Bug Bounty Labs – Realistic bounty-style challenges.

11. Thick Client Pentesting

• Thick Client Labs – Desktop application exploitation.

12. Wireless Security

• Wireless Labs – Wi-Fi hacking & security testing environments.

13. AI/LLM Security

• Vulnerable LLM/AI Labs – Prompt injection, data leakage, and AI exploitation scenarios.

1. Live Target

Bug hunting

1. Done