A lot of security talk around these parts but not a recommendation of online security lab and training platforms like HackTheBox. Please try them out if you haven't. After learning you can try out skills on their lab or CTF platforms. Training on these platforms let you understand how to make more secure applications. A very long time ago I had my kickstart in my work from doing CTFs. You used to need to hack the login form to get on this web site... I sucked at it and I still do, but you learn a lot extremely quickly and understand how things work far better than just reading on social media. Many people's questions or suspicions about things could be answered if they just did the security research on whatever they were suspicious about themselves... so do your proof of work.

Replies (4)

For forensics practice I like using the NIST CFReDS site. You can download many different kinds of images. There isn't anything too new on here for Pixels, but, I would like to see someone donate a GrapheneOS extraction image for research. We kind of made this difficult for ourselves since the OS is so secure :). A userdebug build would give the root access to FFS, but not the same. Cellebrite and Magnet hate us, so they wouldn't do it. Their mobile forensic CTFs are great though.
shaun's avatar
shaun 4 months ago
I love hack the box. Pentesterlab is another good one for web relayed vulns. And tryhackme is pretty good too.
Tryhackme is also a great alternative. Immersivelabs is also superb but not easy to get all lab access. I only had access to the latter for a short while for some non-profit training drills and have only positive things to say about it. I'd pay good money for a complete individual plan if I could.