Cyber Foundations
Networks, Linux, Windows, the web, virtualization and security principles.
— ETHICAL HACKING · FROM FOUNDATION TO FIELD-READY
Learn to think
like an attacker.
Build like a defender.
A structured, hands-on cybersecurity program built around safe labs, real-world scenarios and job-ready reporting skills.
106Guided lessons
52Safe practice labs
4Portfolio projects
# AUTHORIZED TRAINING ENVIRONMENT
learner@bq-lab:~$ academy status
LEARNING PATHEthical Hacker FoundationsMODULE03 — Web Application SecurityPROGRESS████████░░ 78%
learner@bq-lab:~$ open next-lab
● LAB READY Access Control Basics
Start isolated workspace? [Y/n] █
BUILT AROUNDOWASPMITRE ATT&CKNISTCVSSZERO TRUST
// THE LEARNING PATH
From curious beginner
to capable practitioner.
No scattered tutorials. Follow a deliberate sequence that connects technical foundations to practical security testing—and always finishes with remediation.
Recon & Enumeration
Map authorized environments, identify services and document an attack surface.
Web Application Security
Study authentication, access control, injection, XSS and the OWASP Top 10.
Network Security
Analyze traffic, validate configurations and understand common network weaknesses.
Cloud & Identity
Learn identity-first security, permissions, secrets and cloud misconfiguration risks.
Reporting & Remediation
Write reproducible findings, prioritize risk and recommend practical fixes.
LIVE LAB · 03.08 12:46
SCENARIOBroken access control
Review an intentionally vulnerable training application and identify why one role can view another role’s records.
SCOPE academy-lab.local OBJECTIVE Find → Explain → Fix
// PRACTICE WITH PURPOSE
Real skills require
real practice.
Every lab runs in a controlled training environment. You will investigate realistic problems, capture evidence and learn how to fix the weakness—not merely find it.
- ✓ Browser-based isolated workspaces
- ✓ Hints that teach without giving away the answer
- ✓ Defensive guidance after every exercise
- ✓ Portfolio-ready capstone reports
// WHAT YOU WILL LEARN
Skills that transfer
beyond the lab.
Built for learners pursuing cybersecurity roles, stronger development practices or a deeper understanding of digital risk.
01 Linux & command line ↗
02 TCP/IP & DNS ↗
03 HTTP & APIs ↗
04 Burp Suite workflow ↗
05 Vulnerability validation ↗
06 Professional reporting ↗
✓
AUTHORIZATION FIRST. ALWAYS.
Ethical by design—not a disclaimer added later.
Labs are isolated and purpose-built. Test real systems only with explicit written permission.
// COMMON QUESTIONS
Before you begin.
Do I need previous cybersecurity experience?
No. The path starts with computer, networking and Linux fundamentals, then advances gradually.
Is this course legal and safe?
Yes. Exercises belong in authorized, isolated labs. Testing a real system without permission is prohibited.
Will this prepare me for a cybersecurity career?
It develops technical and reporting skills relevant to junior security, SOC and application-security pathways.
Can I learn on a phone or tablet?
Lessons work across devices, while hands-on labs are best on a laptop or desktop.
— YOUR CYBERSECURITY PATH STARTS HERE
Learn the craft.
Respect the boundary.
Build practical security knowledge through structured lessons and safe, authorized labs.