Free · No account needed
Certification study paths
Pick a certification and work through every public syllabus module. Each module links the guides, writeups and practice machines you need, and your progress is saved in your browser.
PT2
TryHackMe
Free study path mapping HackIndex content to the TryHackMe PT2 exam domains: advanced web attacks, LLM exploitation, vulnerability chaining, container escape, AD trust abuse, NTLM relay, cloud security bypass, and fileless post-exploitation.
OSCP
OffSec · PEN-200
An independent, structured study path aligned with the OSCP® (PEN-200) exam syllabus, from network enumeration and web application attacks to Active Directory exploitation and privilege escalation.
OSWA
OffSec · WEB-200
An independent, structured study path aligned with the OSWA® (WEB-200) exam syllabus, covering black-box web application attacks: XSS, SQL injection, XXE, SSTI, command injection, SSRF, IDOR, CORS, and directory traversal.
OSWP
OffSec · PEN-210
An independent, structured study path aligned with the OSWP® (PEN-210) exam syllabus, covering wireless attacks: 802.11 fundamentals, WEP/WPA/WPA2 cracking, WPS exploitation, rogue access points, WPA Enterprise, and captive portals.