Cybersecurity Learning Roadmap (Free Resources) 🛡

Cybersecurity Learning Roadmap (Free Resources) :shield:

--

A curated list of rare and lesser-known free courses and resources to learn Cybersecurity — perfect for building skills from the ground up without paying a cent.

--


:shield: Free Cybersecurity Courses

1. TryHackMe – Free Learning Paths

  • Link: https://tryhackme.com

  • Highlights: Hands-on virtual labs, beginner-to-advanced challenges, guided “rooms” covering penetration testing, network security, and red teaming.

  • Rare Tip: The Pre Security and Advent of Cyber paths are entirely free and great for structured learning.


2. Open Security Training

  • Link: http://opensecuritytraining.info

  • Highlights: Extremely detailed courses on reverse engineering, ARM assembly, forensics, and exploitation techniques.

  • Rare Tip: Focuses on deep technical skill-building, not just surface-level concepts.


3. OverTheWire Wargames

  • Link: https://overthewire.org

  • Highlights: Gamified Linux & security puzzles; great for practicing CTF-style challenges.

  • Rare Tip: Start with Bandit to learn Linux commands with a security twist.


4. Cyberdefenders – Blue Team Labs

  • Link: https://cyberdefenders.org

  • Highlights: Free blue team & SOC analyst labs, real-world attack investigation simulations.

  • Rare Tip: Perfect for learners interested in defensive security and threat hunting.


5. PortSwigger Web Security Academy

  • Link: https://portswigger.net/web-security

  • Highlights: The creators of Burp Suite provide free, in-browser labs for mastering web application security.

  • Rare Tip: Learn OWASP Top 10 hands-on, not just theoretically.


:books: Additional Rare Free Resources


:high_voltage: Recap

  • Hands-on labs → TryHackMe, HackTheBox, OverTheWire

  • Blue team focus → Cyberdefenders, Blue Team Academy

  • Deep tech skills → Open Security Training, DFIR Training

  • Web hacking mastery → PortSwigger Academy

  • Gamified practice → PicoCTF, CTFtime


--

1. Hands-On Labs & Gamified Learning

Resource Name Link Focus Area Type Status Notes
TryHackMe – Pre Security & Advent of Cyber tryhackme.com Beginner to Advanced Pentesting Virtual Labs Not Started Great structured path for beginners
HackTheBox – Starting Point hackthebox.com Pentesting Fundamentals Virtual Labs Not Started Must solve “Invite Code” challenge to enter
OverTheWire – Bandit overthewire.org Linux & Security Basics Wargames Not Started Learn Linux via fun puzzles
PicoCTF picoctf.org CTF Challenges Gamified Not Started Beginner-friendly CTF puzzles
CTFtime ctftime.org CTF Events Event Tracker Not Started Find live global competitions

2. Blue Team & Defensive Security

Resource Name Link Focus Area Type Status Notes
CyberDefenders cyberdefenders.org Threat Hunting / SOC Labs Not Started Real-world defensive challenges
Blue Team Academy blueteamlabs.online SOC Investigations Labs Not Started Free entry-level SOC exercises
DFIR Training dfir.training Digital Forensics Tools & Tutorials Not Started Free resources for forensic analysis

3. Web Application Security

Resource Name Link Focus Area Type Status Notes
PortSwigger Web Security Academy portswigger.net/web-security Web App PenTesting Labs Not Started Learn OWASP Top 10 hands-on

4. Deep Technical Knowledge

Resource Name Link Focus Area Type Status Notes
Open Security Training opensecuritytraining.info Reverse Engineering, Exploits Course Not Started Highly detailed, advanced content

:fire: Suggested Learning Path

  1. Start with fundamentals → OverTheWire → TryHackMe Pre Security

  2. Move into web security → PortSwigger Labs

  3. Do CTFs for practice → PicoCTF → CTFtime

  4. Blue team defense → CyberDefenders → Blue Team Academy

  5. Specialize → Open Security Training & DFIR labs


--

ENJOY & HAPPY LEARNING! :heart:

8 پسندیدگیاں