Primary Lab Platforms
Create free accounts on these platforms to access all integrated labs
TryHackMe
FREE TIERGamified cybersecurity learning with guided paths for beginners and advanced practitioners. 60% of rooms are free.
Best for: CSY101, CSY102, CSY202, CSY203, CSY301
Visit TryHackMe →HackTheBox
FREE TIERRealistic penetration testing lab environment. Free tier includes retired machines and Starting Point track.
Best for: CSY104, CSY201, CSY202
Visit HackTheBox →PortSwigger Academy
100% FREEIndustry-leading web security training with 100+ free labs covering OWASP Top 10 and beyond. Created by Burp Suite developers.
Best for: CSY104 (Web Application Security)
Visit PortSwigger Academy →OverTheWire
100% FREEClassic wargames teaching security concepts through command-line challenges. Perfect for Linux fundamentals.
Best for: CSY101 (Bandit series)
Visit OverTheWire →CryptoHack
100% FREEModern cryptography challenges from beginner to advanced. Learn by breaking real crypto implementations.
Best for: CSY103 (Cryptography Basics)
Visit CryptoHack →CyberDefenders
100% FREEBlue team CTF challenges focusing on digital forensics, incident response, and threat hunting.
Best for: CSY204, CSY301, CSY303
Visit CyberDefenders →LetsDefend
FREE TIERReal-world SOC analyst training with simulated security alerts and incident response scenarios.
Best for: CSY301 (Security Operations)
Visit LetsDefend →flAWS Cloud
100% FREEAWS security challenges teaching common cloud misconfigurations through hands-on practice.
Best for: CSY302 (Cloud Security)
Visit flAWS →Quick Start Guide
- Create Accounts: Sign up for all 8 platforms (all free)
- Start with TryHackMe: Complete "Pre Security" path
- Follow Course Labs: Each week has integrated lab recommendations
- Track Progress: Use platform badges and certificates
- Build Portfolio: Document your labs and writeups
Additional Resources
YouTube Channels
- IppSec - HackTheBox machine walkthroughs
- John Hammond - CTF solutions and cybersecurity tutorials
- LiveOverflow - Binary exploitation and security research
- NetworkChuck - Networking and security
- The Cyber Mentor - Penetration testing courses
Free Books & Guides
- Operating Systems: Three Easy Pieces - Free online textbook
- OWASP Testing Guide - Web application security testing
- NIST Cybersecurity Framework - Industry standards
- MITRE ATT&CK - Adversary tactics and techniques
Practice & Community
- picoCTF - Beginner-friendly CTF competition
- VulnHub - Vulnerable VMs for practice
- Reddit: r/cybersecurity, r/netsec, r/AskNetsec
- Discord: Join TryHackMe and HackTheBox communities
Lab Integration by Course
See complete lab mapping in the LAB_RESOURCES.md document
CSY104 - Web Application Security
100+ free PortSwigger labs covering:
-
Week 3-4: SQL Injection
18 labs from beginner to expert level
Start Labs → -
Week 5-6: Cross-Site Scripting (XSS)
30 labs covering reflected, stored, and DOM-based XSS
Start Labs → -
Week 7-8: Authentication & Access Control
27 labs on auth bypass and access control vulnerabilities
Start Labs →
CSY101 - Foundations of Cybersecurity
TryHackMe Pre-Security path + OverTheWire Bandit:
-
Week 3: Operating Systems
Bandit Levels 0-10 (Linux fundamentals)
Start Labs → -
Week 4: Networking
TryHackMe: "What is Networking?" room
Start Labs →
CSY202 - Penetration Testing
HackTheBox Starting Point + TryHackMe Jr Pentester path:
-
Week 1-3: Reconnaissance
TryHackMe: Nmap, Metasploit, Hydra rooms
Start Labs → -
Week 7-9: Privilege Escalation
Linux & Windows PrivEsc rooms + HTB machines
Start Labs →