EVIL

Learn · Recommended paths

Learning paths

Not sure where to start? Follow a track. Each path puts EVIL’s modules, tools and quizzes in an order that makes sense, with the level, duration and goals of each step. The offensive techniques shown are there to understand how to defend: use them only on your own systems or with written authorisation.

01 ~ 3 hours

Beginner level · no prerequisites

Fundamentals

For those starting from scratch who want to understand how basic attacks and defences work.

  1. Quiz centreGauge your starting level with a few categories
  2. Cryptography studioHashes, passwords and HTTPS: the basics you’ll use everywhere
  3. Web attack simulatorYour first vulnerability: SQL injection in four phases
  4. GlossaryKeep the terms you don’t know to hand

By the end: you recognise the most common web vulnerabilities and know why a password must be protected with a slow hash.

02 ~ 4 hours

Intermediate level · web and networking basics

Web security

For those building applications who want to understand and close bugs before others do.

  1. Web attack simulatorThe five classic vulnerabilities, with the defence for each
  2. Virtual labTry the guided scenarios in a simulated terminal
  3. HTTP header auditCheck which protections are missing from a site of yours
  4. Quiz centreThe "Web security (OWASP)" category to lock in the concepts

By the end: you know where each vulnerability originates in the code and which verifiable defence to apply.

03 ~ 4 hours

Intermediate level · defenders (blue team / SOC)

Defence and analysis

For those who want to learn to read attacks like a security operations centre analyst.

  1. Advisories and vulnerabilities mapWhat is happening now, from public sources
  2. Historic breachesThe cases that changed the rules, and the lesson that remains
  3. Incident response timelineHandle an incident minute by minute
  4. Report generatorPut the results in order in a professional report

By the end: you can reconstruct an incident, recognise recurring causes and write a readable report.

Ready to start? The first module of each path needs no account. Create a free account to save your progress and trophies.