Training resources

Useful resources

For reference and inspiration

• Security controls: The 18 CIS Critical Security Controls
• Security risks for web applications: OWASP Top Ten
• Adversary tactics and techniques: MITRE ATT&CK

Vulnerability databases

• CVE Details (cvedetails.com)
• National Vulnerability Database (NIST)

Demos

• Fingerprinting: Cover Your Tracks (Electronic Frontier Foundation – EFF)
• SQL Injection: hands-on demo (codingame.com)

Miscellaneous

• Is it Worth the Time? (xkcd)