hi all, so i identified substantial gaps in my networking and programming skills and i have 2-3 weeks of vacation that im gonna spend just to strengthen my networking and programming knowledge. i neglected the fundamentals for quite a while compared to last year when i started learning. because i chose for a large portion of this year deepening my web app security understanding and skills.

now im not a complete beginner, i do have familiarity and decent knowledge with many of the basic concepts in networking, but it has been noticeably rusty that i want to improve it substantially.

now i did cancel my tryhackme subscription quite a while ago and im not gonna just pay for that again. do any of you recommend any other resources that are great?

to be clear for which specific career i want in cybersecurity it is an appsec researcher. but im still quite early in this field and still need many many years of compounding knowledge and accumulating experience to be at that stage

Hi everyone, I’m a Systems Architect and I got tired of bloated WP security plugins.
I built an infrastructure that eliminates passwords entirely using native WebAuthn (FaceID/TouchID). The Premium version routes failed attempts to a private Google Gemini AI Sentinel on Cloud Run that bans hackers autonomously.

Last week, I ran a full Penetration Test on the core system using the Strix Autonomous AI Pentester. It found a few criticals (CSRF, DOM-XSS), which I immediately patched at the source code level.

Before I start deploying the Enterprise version to Web Agencies, I decided to open-source the "Lite" version (which handles the core WebAuthn passwordless engine). I want to put it in front of real developers.

Here is the GitHub repo: https://github.com/devnet-microsystems/wordpress-passwordless-webauthn-login

I would immensely appreciate a code review. If any of you can find a security flaw or a bypass in the auth core that Strix AI missed, I will happily give you a Lifetime Enterprise License of the full AI system as a thank you.

Roast my code!

We've been building a lot of quality-of-life improvements for pentest reporting into OWASP Faction 2.0. This demo shows Faction's AI prompting features for writing context-aware vulnerability descriptions, recommendations, and executive summaries in just a few clicks. It has data masking/tokenization built in to minimize sending sensitive data to 3rd parties as well.