{"id":77195,"url":"https://github.com/jassics/awesome-cybersecurity-learning-resources","name":"awesome-cybersecurity-learning-resources","description":"Learning resources for cybersecurity including youtube, github, books, videos, courses, labs, articles etc. at one place","projects_count":62,"last_synced_at":"2026-09-05T23:00:26.426Z","repository":{"id":257605144,"uuid":"827376242","full_name":"jassics/awesome-cybersecurity-learning-resources","owner":"jassics","description":"Learning resources for cybersecurity including youtube, github, books, videos, courses, labs, articles etc. at one place","archived":false,"fork":false,"pushed_at":"2026-06-27T15:50:59.000Z","size":7071,"stargazers_count":119,"open_issues_count":7,"forks_count":25,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-17T05:07:48.358Z","etag":null,"topics":["cybersecurity","cybersecurity-awareness","cybersecurity-blog","cybersecurity-education","cybersecurity-references","cybersecurity-resources","cybersecurity-training","learning-resources","security-book","security-learning"],"latest_commit_sha":null,"homepage":"https://cybercloud.guru/","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jassics.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-07-11T14:32:11.000Z","updated_at":"2026-08-13T05:23:23.000Z","dependencies_parsed_at":"2024-09-17T18:04:15.778Z","dependency_job_id":"15ac1f71-0f00-478d-9360-9b01cc110a22","html_url":"https://github.com/jassics/awesome-cybersecurity-learning-resources","commit_stats":null,"previous_names":["jassics/awesome-cybersecurity-learning-resources"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/jassics/awesome-cybersecurity-learning-resources","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jassics%2Fawesome-cybersecurity-learning-resources","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jassics%2Fawesome-cybersecurity-learning-resources/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jassics%2Fawesome-cybersecurity-learning-resources/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jassics%2Fawesome-cybersecurity-learning-resources/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jassics","download_url":"https://codeload.github.com/jassics/awesome-cybersecurity-learning-resources/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jassics%2Fawesome-cybersecurity-learning-resources/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37037949,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-05T02:00:06.064Z","response_time":108,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"created_at":"2024-11-11T06:27:22.584Z","updated_at":"2026-09-05T23:00:26.426Z","primary_language":null,"list_of_lists":false,"displayable":true,"categories":["Security Newsletters","Security: Blogs/Articles","Free/Paid Cybersecurity Labs","Free/Paid Cybersecurity Courses","Security Events/Conferences","Must Read - Security Books","Cybersecurity Videos"],"sub_categories":[],"readme":"# Awesome Cybersecurity Learning resources\nA single place to get every possible learning resources for cybersecurity that includes YouTube videos, GitHub repositories, books, videos, courses, labs, certifications, articles, newsletters etc. \nWe would keep adding relevant learning references when we find them informative for our community.\n\n![cybersecurity learning resources](images/awesome-cybersecurity-learning-resources.png)\n\n\u003e [!NOTE]\n\u003e **You can also star or fork our other important repositories listed below:**\n1. [Security Study Plan](https://github.com/jassics/security-study-plan)\n2. [Security Interview Questions](https://github.com/jassics/security-interview-questions)\n3. [Awesome AWS Security](https://github.com/jassics/awesome-aws-security)\n4. [Cybersecurity career roadmap](https://github.com/jassics/cybersecurity-roadmap)\n5. [Cybersecurity FAQs](https://github.com/jassics/cybersecurity-career-faq)\n6. [Cybersecurity Slides](https://github.com/jassics/cybersecurity-slides)\n7. [Python for Cybersecurity](https://github.com/jassics/python-for-cybersecurity)\n\n\u003e [!TIP]\n\u003e **We have categorised the learning resources based on the below domains (subject to change):**\n1. [Common Learning Resources](README.md)\n2. [Penetration Testing learning resources](awesome-pentest-learning-resources.md)\n3. [Network security learning resources](awesome-network-security-learning-resources.md)\n4. [API security learning resources](awesome-api-security-learning-resources.md)\n5. [Application security learning resources](awesome-appsec-learning-resources.md)\n6. [DevSecOps learning resources](awesome-devsecops-learning-resources.md)\n7. [AI/ML security learning resources](awesome-aiml-security-learning-resources.md)\n8. [Cloud security learning resources](awesome-cloud-security-learning-resources.md)\n9. [GRC learning resources](awesome-grc-learning-resources.md)\n10. [Mobile Application Security resources](awesome-mobile-security-learning-resources.md)\n11. [Container Security learning resources](awesome-container-security-learning-resources.md)\n12. [SOC / Blue Team learning resources](awesome-soc-blue-team-learning-resources.md)\n13. [DFIR (Digital Forensics \u0026 Incident Response) learning resources](awesome-dfir-learning-resources.md)\n14. [Threat Intelligence (CTI) learning resources](awesome-threat-intel-learning-resources.md)\n15. [Malware Analysis \u0026 Reverse Engineering learning resources](awesome-malware-reversing-learning-resources.md)\n16. [Red Team \u0026 Active Directory learning resources](awesome-red-team-ad-learning-resources.md)\n17. [OSINT learning resources](awesome-osint-learning-resources.md)\n18. [IoT \u0026 Hardware Security learning resources](awesome-iot-hardware-security-learning-resources.md)\n19. [ICS / OT Security learning resources](awesome-ics-ot-security-learning-resources.md)\n20. [Cryptography learning resources](awesome-cryptography-learning-resources.md)\n21. [IAM \u0026 Identity Security learning resources](awesome-iam-identity-security-learning-resources.md)\n22. [Blockchain / Smart Contract Security learning resources](awesome-blockchain-security-learning-resources.md)\n23. [Binary Exploitation \u0026 Low-Level Security learning resources](awesome-binary-exploitation-learning-resources.md)\n\n## ToC\n1. [Books](#must-read---security-books)\n2. [Cybersecurity Videos](#cybersecurity-videos)\n3. [Free/Paid Cybersecurity Courses](#freepaid-cybersecurity-courses)\n4. [Free/Paid Cybersecurity Labs](#freepaid-cybersecurity-labs)\n6. [Certifications](#certifications)\n7. [Newsletters](#newsletters)\n8. [Blogs/Articles](#blogsarticles)\n9. [Security Events/Conferences](#security-eventsconferences)\n\n## Must Read - Security Books\n**Books that you must read in your cybersecurity journey**\n\n1. [Secure By Design](https://amzn.to/47Ow952) - Highly Recommended\n2. [Security Engineering 3rd Edition](https://amzn.to/3ZRHnUv)\n3. [The Web Application Hacker's Handbook](https://www.amazon.in/Web-Application-Hackers-Handbook-Exploiting) - This was my first book when I started working as a Penetration Tester in 2014\n4. [Thinking Security](https://amzn.to/3BCptLg)\n5. [Schneier on Security](https://amzn.to/4eOuKxS) - Little old now, but still very much useful to give you an idea of overall security notion. I enjoyed reading it!\n6. [The Phoenix Project](https://amzn.to/3zJPmZ6)\n\n## Cybersecurity Videos\n1. [How to build a career in Cybersecurity](https://www.youtube.com/watch?v=TPoI1vwcdxo)\n2. [Cybersecurity Roadmap for Beginners](https://www.youtube.com/watch?v=-qklv1WXdmo)\n3. [Most underrated skills in Cybersecurity](https://www.youtube.com/watch?v=bUn_4b-Bkms)\n4. [Top 3 skills for success career in Cybersecurity](https://www.youtube.com/watch?v=j2IyXcZ2VTY)\n\n## Free/Paid Cybersecurity Courses\n1. [Foundation of Cybersecurity by Google](https://www.coursera.org/learn/foundations-of-cybersecurity)\n2. [Google Cybersecurity Professional Certificate](https://www.coursera.org/professional-certificates/google-cybersecurity)\n3. [Certified in Cybersecurity Specialization by ISC2](https://www.coursera.org/specializations/certified-in-cybersecurity)\n4. [ISC2 CC - Free entry-level cybersecurity certification](https://www.isc2.org/certifications/cc) - Exam voucher is free under the \"One Million Certified in Cybersecurity\" program in some regions.\n5. [Microsoft SC-900 Fundamentals](https://learn.microsoft.com/en-us/certifications/security-compliance-and-identity-fundamentals/)\n6. [Cisco Networking Academy - free cybersecurity courses](https://www.netacad.com/cybersecurity)\n\n## Free/Paid Cybersecurity Labs\n1. [hackthebox](https://referral.hackthebox.com/mzAlUIY) - Recommended\n2. [tryhackme](https://tryhackme.com/)\n3. [vulnhub](https://www.vulnhub.com/)\n4. [portswigger web security academy](https://portswigger.net/web-security/all-labs) - Must go through\n5. [Parrot CTF](https://parrot-ctfs.com/)\n6. [Pico CTF](https://picoctf.org/)\n7. [Lets Defend for Blue Teamers](https://www.letsdefend.io/)\n8. [CTF Time](https://ctftime.org/) \n9. [Hacker101 by HackerOne](https://www.hacker101.com/)\n10. [CyberDefenders](https://cyberdefenders.org/) - Blue-team challenges, DFIR.\n11. [RangeForce](https://www.rangeforce.com/) - Blue-team labs.\n\n## Security Certifications\n**We are keeping the certifications which are popular amongst security community and what HR asks.**\n1. CC from ISC2\n2. CompTIA Security+\n3. CISSP from ISC2\n4. CompTIA SecurityX (formerly CASP+, rebranded Dec 2024)\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e1. ISC\u003csup\u003e2\u003c/sup\u003e\u003c/b\u003e \u003c/summary\u003e\n\n1. CC - Entry-level Cybersecurity\n2. CISSP - Leadership and Operations\n3. CSSLP - Secure Software Development\n4. SSCP - Security Administrator\n5. CCSP - Cloud Security\n6. CGRC - Governance, Risk and Compliance\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e2. EC-Council\u003c/b\u003e\u003c/summary\u003e\n\n1. C|EH - Ethical Hacker\n2. E|CSA\n3. C|HFI\n4. C|CISO\n5. C|Pent - Penetration Testing\n6. C|SA - SOC Analyst\n7. E|CIH - Incident Handler\n8. E|CDE - DevSecOps\n9. CASE.Net - Application Security\n10. CASE.Java - Application Security\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e3. CompTIA\u003c/b\u003e\u003c/summary\u003e\n\n1. Security+\n2. CySA+\n3. Pentest+\n4. SecurityX (formerly CASP+, rebranded Dec 2024)\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e4. eLearn Security\u003c/b\u003e\u003c/summary\u003e\n\n   1. eJPT\n   2. eWPT\n   3. eWPTX \n   4. eCPPT\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e5. Offensive Security\u003c/b\u003e \u003c/summary\u003e\n\n   1. OSCP \n   2. OSEP \n   3. OSWP \n   4. OSWA \n   5. OSWE\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e6. Cloud Security Alliance\u003c/b\u003e\u003c/summary\u003e\n\n   1. CCSK \n   2. CCAK\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e\u003cb\u003e7. CNCF Certs\u003c/b\u003e\u003c/summary\u003e\n\n   1. KCNA - Kubernetes and Cloud Native Associate\n   2. CKA \n   3. CKS\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e8. SANS Certs\u003c/b\u003e \u003c/summary\u003e\n\n1. GCSA\n2. GCLD\n3. GCPN\n4. GWEB\n5. GCSA\n6. GSEC\n7. GWAPT\n8. GSLC - GIAC Security Leadership\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e9. Practical DevSecOps Certs\u003c/b\u003e\u003c/summary\u003e\n\n1. CDP\n2. CDE\n3. CCSE\n4. CCNSE\n5. CTMP\n6. CASP\n7. CSSE\n8. CSC\n9. CAISP\n\u003c/details\u003e\n\n\u003cdetails\u003e\n\u003csummary\u003e \u003cb\u003e10. APISec Certs\u003c/b\u003e \u003c/summary\u003e\n\n1. CASA - Certified API Security Analyst\n2. ASCP - API Security Certified Professional\n\u003c/details\u003e\n\n\n## Security Newsletters\nInstead of keeping it various locations in this repo, I kept it here for quick look and you can subscribe to the newsletter that is important for you and your career.\n1. [The Hacker News](https://thehackernews.com/#email-outer)\n2. [TLDR Sec](https://tldrsec.com/)\n3. [CSO Online](https://www.csoonline.com/newsletters/signup/)\n4. [Cyber Magazine](https://cybermagazine.com/)\n5. [Dark Reading](https://www.darkreading.com/newsletter-signup/) Recommended :thumbsup:\n6. [API Security](https://apisecurity.io/)\n7. [AWS Security](https://awssecuritydigest.com/)\n8. [Cloud Security](https://cloudseclist.com/)\n9. [One more for cloud security](https://www.cloudsecuritynewsletter.com/)\n10. [SANS Newsletter](https://www.sans.org/newsletters/)\n11. [Schneier on Security](https://www.schneier.com/crypto-gram/) -\u003e Very interesting one :ok_hand:\n12. [Zero Day issues newsletter](https://www.zetter-zeroday.com/)\n13. [Krebs on Security](https://krebsonsecurity.com/subscribe/)\n14. [Security Magazine](https://www.securitymagazine.com/)\n15. [tl;dr sec by Clint Gibler](https://tldrsec.com/) - Weekly AppSec/DevSecOps digest (recommended).\n16. [Risky Business podcast + newsletter](https://risky.biz/)\n17. [OpenSSF Feed / Open Source Security Digest](https://openssf.org/blog/)\n\n## Security: Blogs/Articles\n1. [Reddit: How to get started in Cybersecurity](https://www.reddit.com/r/cybersecurity/comments/ti6a1n/how_to_get_started_into_cybersecurity/)\n2. [Quora: How do I start career in cybersecurity](https://www.quora.com/How-do-I-start-a-cybersecurity-career-from-scratch-with-zero-knowledge)\n3. [NIST Cybersecurity Framework 2.0](https://www.nist.gov/cyberframework)\n4. [MITRE ATT\u0026CK knowledge base](https://attack.mitre.org/)\n5. [OWASP Top 10 (Web, API, LLM, Mobile, K8s) - central OWASP site](https://owasp.org/projects/)\n6. [CISA Known Exploited Vulnerabilities (KEV) catalog](https://www.cisa.gov/known-exploited-vulnerabilities-catalog)\n\n## Security Events/Conferences\nYou can try to present, attend and meet like-minded people in these security chapters or conferences.\nLook for the local chapters near you like Bsides bangalore, Null Hyderabad, Nullcon Goa etc.\n\n| Meetup/Conferences                                       | Type          |\n|----------------------------------------------------------|---------------|\n| [Null](https://null.community/)                          | Chapters      |\n| [Nullcon](https://nullcon.net/)                          | International |\n| [Defcon](https://defcon.org/)                            | International |\n| [Blackhat](https://www.blackhat.com/)                    | International |\n| [OWASP](https://owasp.org/chapters/)                     | Chapters      |\n| Bsides                                                   | Chapters      |\n| [CXO Cywayz](https://cxocywayz.com/)                     | Chapters      |\n| [The Hacker's Meetup](https://thehackersmeetup.org/)     | Chapters      |\n| [Bi0s](https://bi0s.in/)                                 | Chapters      |\n| [ISC2](https://www.isc2.org/chapters)                    | Chapters      |\n| [ISACA](https://www.isaca.org/membership/local-chapters) | Chapters      |\n| [DevSecCon by Snyk](http://devseccon.com/)               | International|\n\n\u003e [!NOTE]\n\u003e This list is not holistic, but we can make it more comprehensive together. So, if you want to add any learning resources, fork the repository and send PR or contact **Sanjeev** on [Linkedin](https://www.linkedin.com/in/jassics/)","projects_url":"https://awesome.ecosyste.ms/api/v1/lists/jassics%2Fawesome-cybersecurity-learning-resources/projects"}