EXPLORE THE CURRICULUM
Level 4 · Your next chapter
Continue through advanced labs, research, competitions and a portfolio.
Before you begin Ready for advanced practice and projects · Step 304–348
45 lessons
Reset filtersL4Advanced penetration testingStep 304–31310 lessons
- 304 Understanding the OSCP Exam and a Preparation Roadmap — The Rules of the 24-Hour Practical BattlefieldExplain the OSCP exam's structure (time, machine composition, report regulations)
- 305 Taking Down Practice Machines Begins — One Report per MachineSelect machines matching difficulty and type from an OSCP-like machine list
- 306 The Thoroughness of Enumeration — The Reality of "Try Harder"Define the true meaning of "Try Harder" as "regression to enumeration"
- 307 ★ Project — Finalizing the Exam-Format Report TemplateTranslate OSCP report requirements (reproducible description, evidence screenshot rules) into a template struc…
- 308 AD Set Takedown Training — From the Client to the Domain ControllerExplain the composition (client → server → DC) and scoring structure of the OSCP AD set
- 309 ★ The First 24-Hour Mock Exam — A Day of Learning to Fight the ClockCompose a 24-hour mock exam set under the real rules (prohibited tools, evidence collection, no external solut…
- 310 Mock Exam Failure-Pattern Analysis & Remediation — Unsolved Machines Come in Three KindsClassify unsolved machines by failure type (missing technique / missed enumeration / time management / stamina…
- 311 ★ The Second 24-Hour Mock Exam — Verification Day, Measuring Whether the Remediation WorkedOrganize Step 310's remedy deliverables into an "improvement list" and fix the items to apply on the second ex…
- 312 ★ Sitting the OSCP Practical Exam — 24 Hours of Doing Only What You PracticedExecute the day-before preparation checklist (equipment, rules, condition)
- 313 OSCP Retrospective & Next Plan — What to Do Before the Results Come OutReconstruct the exam's hour-by-hour timeline (what you solved when, and where you got stuck)
L4Vulnerability research & contributionStep 314–32310 lessons
- 314 Starting Bug Bounty — Understanding the System and Picking Your First TargetExplain the structure of the bug bounty system (platforms, programs, triage)
- 315 Real-Service Recon — Attack Surface MappingExecute the 4 stages of the recon chain — collect → liveness check → classify → map — in order
- 316 Vulnerability Discovery — A Systematic Feature-by-Feature ApproachExplain why "scanner dependence" is a beginner's trap
- 317 Verifying Candidates and Confirming ImpactApply the "is it a bug or not" judgment criteria (reproducibility + security impact)
- 318 Writing a Report That Gets AcceptedExplain the standard report structure (summary · reproduction steps · impact · fix suggestion · evidence)
- 319 Submitting Your First Report & Handling Triage — The Real Work Starts After the ButtonExplain the triage flow a submitted report goes through (intake → review → verdict)
- 320 1-day Vulnerability Analysis — Reverse-Engineering the Flaw from a Patch diffExplain what a 1-day vulnerability and patch-diff analysis are, and why they're powerful
- 321 CVE Reproduction and Publishing the Analysis Report — The Proof of an Analysis Is ReproductionExplain the structure of reproduction proof: "success on the vulnerable version + blocked on the patched versi…
- 322 Second CVE: Independent Analysis — Standing Alone Through the Analysis CyclePerform the full 1-day analysis cycle alone, guided only by a checklist
- 323 Publishing an Open-Source Tool and Contributing to the Community — Code as a WorkChoose a tool to publish and clean its code into "a state others can use"
L4Broaden competition experienceStep 324–3296 lessons
- 324 Competing in a Domestic Qualifier — Chasing the Finals: The Total Score Beats the HeroExplain and execute the four mechanisms of qualifier-day operations (team channel, problem assignment, time ma…
- 325 Intensive Training for the Finals — Two Weeks of Making What You Know CertainResearch the finals format (long-duration Jeopardy / Attack & Defense / presentation included) and explain how…
- 326 Competing in the Finals — The Highest-Level Experience: Executing Our Plan Under PressureExplain the environmental differences of an offline finals (venue atmosphere, network, operating rules) and pr…
- 327 Gap Analysis Against the Winning Team — Dissecting "Why," Not "What"Define the four gap types (technique, tooling, perspective, operations) and apply them to real cases
- 328 Competing in an International CTF — The Global Competition Experience: Seeing the World's CeilingExplain the differences between international and domestic competitions (scale, difficulty, timezone, language…
- 329 Analyzing World-Class New Techniques — The Write-up Is Your TextbookExplain a systematic procedure for collecting top-team Write-ups after a competition
L4Sharing knowledge & careersStep 330–3356 lessons
- 330 Building a Routine for Absorbing Cutting-Edge Knowledge — Whoever Subscribes to Good Channels WinsClassify security information channels into three tiers (conferences, blogs, newsletters) and explain the clas…
- 331 Starting to Mentor — Learning by Teaching: If You Can't Explain It, You Don't Know ItExplain the Feynman technique's principle and argue why mentoring is "the best review"
- 332 Building Seminar Talk Materials — Designing What the Audience Takes HomeSelect a talk topic by the criterion of "among what I'm good at, what's useful to the audience"
- 333 Giving a Public Talk and Sharing Materials — Carving Your Name into the CommunityExplain the three routes to a speaking opportunity (club, online meetup, self-organized) and execute one
- 334 Consolidating Your Portfolio — The Proof-of-Skill Package: Scattered Evidence into One StoryInventory scattered assets (posts, reports, repos, competitions, certifications, talks) with a script
- 335 Fixing Your Career Direction — Choosing Your Path Among Security's BranchesDistinguish and explain four or more major security career branches by their daily routines and required compe…
L4Competition & reflectionStep 336–3405 lessons
- 336 Challenging for the Domestic Championship — Mustering Total Strength: 24 Hours of Discipline Makes a ChampionDo a final field-by-field audit of team strength and judge whether to reinforce weak fields
- 337 Win/Loss Analysis and Designing the Next Challenge — Win or Lose, It's All DataStructure competition results into a per-problem analysis table (solve status, time spent, winning-team compar…
- 338 Intensive Weakness Training — Completing the Top Tier: Escaping the Trap of Doing More of What You're Good AtSort a weak field's past problems by difficulty and build a training plan
- 339 The Highest-Level Contest — A Domestic Rematch or an International Final: Skill Gaps Are Small; Operations Decide the MatchExplain the structure in which "non-skill variables" decide the match at highest-level competitions
- 340 A Memoir of the Entire Competition Journey — Assetization: Turning Experience into StoryCollect scattered competition records in one place while keeping the "no record" rule
L4New fields & integrated practiceStep 341–3444 lessons
- 341 Exploring the Next Growth Axis — Cloud/Mobile/IoT Security: A New Layer to Lay on the Fundamentals You've BuiltExplain the attack surfaces and representative resources of the four areas: cloud, mobile, IoT, and AI securit…
- 342 Launching into a New Field — With the Posture of Level 0 and a Proven MethodologyFind the selected area's standard entry path (official docs, beginner labs, community curricula) and fix its t…
- 343 The Integrated Intrusion Scenario — Operating Your Full Capability: From a List of Techniques to an OperationDefine an intrusion scenario with the three elements of goal, starting point, and rules
- 344 Penetration Playbook v2.0 — The Cycle Where Experience Becomes a ManualExhaustively collect the assets accumulated since v1.0 (checklists, timelines, lessons) and build a revision-c…
L4Community & the next journeyStep 345–3484 lessons
- 345 Establishing a System for Giving Back — Building a Structure That Returns What You ReceivedSettle your contribution activities so far (writing, code, mentoring, presentations) into numbers
- 346 Leading a CTF Team — Becoming the Center of Gravity of a Winning TeamDiagnose each member's strengths, weaknesses, growth desires, and available time to build a team status table
- 347 Competing in the Target Competition — The Curriculum's ReckoningConfirm the season's target competition and design a training cycle to match it
- 348 A Completion Retrospective and the Next Journey — The End Is the Starting PointOrganize the journey's growth metrics into numbers and tables