An Ophion-curated list of nine free cybersecurity learning starting points, including OWASP guides, web-security labs and hands-on challenges. Replaces the previous unlinked placeholder list.
Self-contained sandboxed web app demonstrating command injection in a toy 'is this website up' checker — safe, isolated educational demo showing how unsanitized input leaks fake credentials.
Educational breakdown of a classic insecure-deserialization/session-tampering vulnerability (base64-encoded cookie privilege escalation) — explains the flaw, why it happens, and proper remediation (server-side sessions, signed JWTs).
Curated start.me page of OSINT tools/links.
