The labs are the practice. This is the theory, the walkthroughs and the references that go with them —
mine first, then the free material I send people to when they ask where to read more.
From The XSS Rat
Same person who built these labs.
- Medium blog
Write-ups, methodology and the thinking behind the bugs — the long form version of the lessons above.
- YouTube channel
Live hunting, lab walkthroughs and bug class explainers.
- Courses
Structured guides per bug class, plus the certification prep tracks.
- Endless Bundle
Everything current and future in one place.
- Linktree
Every channel, including LinkedIn and X.
Free reference material
Not mine. Still what I open daily.
Practise the mechanics
Tools on this site, free, nothing to install.
- Regex Trainer
Cheat sheet, live builder with a token-by-token explainer, graded exercises, ReDoS playground.
- Guess the Command
Drill the command line you will be living in.
- hackQuiz
Quiz yourself on the theory before you go hunting.
- SubScraper
Subdomain enumeration workflow, start to finish.
- Google Dork Generator
Build dorks without memorising the operators.
- News Feeds
Security news in one page.
Prove it
When the practice should start counting for something.
- Exam practice environments
CWAP, CAPIE and OSCP-style targets, plus the certificate portal.
- RatCTF
Capture the flag, same hands, scored.
- Rat Site
Over 40 bugs in one application and nobody telling you the class.
- Security incidents
How we run and report on our own services. Read it as a model for a report.