A reference list of free and paid platforms to build cybersecurity skills — hands-on labs, structured courses, and certification prep.
🔗 tryhackme.com The easiest way to learn cybersecurity through hands-on, gamified labs. Great starting point for total beginners.
🔗 hackthebox.com Practice hacking realistic machines that mirror what you'll actually see on the job. More advanced/less hand-held than TryHackMe.
🔗 owasp.org/www-project-juice-shop A deliberately vulnerable web app where you can legally practice finding and exploiting real security flaws.
🔗 skillsforall.com Free courses on networking, Linux, Python, and cybersecurity fundamentals, backed by one of the biggest names in networking.
🔗 portswigger.net/web-security The gold standard for learning web application hacking — completely free, built by the makers of Burp Suite.
🔗 pluralsight.com Structured, professional-grade courses on cybersecurity, cloud, Linux, and IT, taught by industry experts (paid subscription).
🔗 overthewire.org Classic "wargames" that teach Linux fundamentals and exploitation through hands-on challenges instead of video tutorials.
🔗 pentesterlab.com Guided labs focused purely on exploitation — learn the same techniques used in real-world penetration testing.