Phase 01
Reconnaissance
Know your target before you touch it
Passive and active information gathering about the target without triggering alerts.
White Hat · Bug Bounty · Junior-Friendly
Pentesting for
Dummies and Kindergarteners
A no-jargon, AI-empowered guide to ethical security testing.
7 Layers Covered
40+ Topics
80+ AI Prompt Templates
Junior → Mid Skill Level
About
What is this?
This site teaches junior cybersecurity engineers how to approach penetration testing systematically — layer by layer — using both traditional methodology and modern AI assistance. Every topic is framed around white-hat principles and bug bounty best practices.
Browse layersCurriculum
The Pentest Layers
Penetration testing covers every layer of the stack. This guide follows the attacker's natural path — from external reconnaissance down to post-exploitation — so you build mental models that transfer to real engagements.
Phase 02
Network Layer
Ports, protocols, and perimeter
Scanning open ports, identifying services, mapping the network topology, and testing firewall rules.
Phase 03
Application Layer
Web app attack surface
Testing web and API surfaces for injection, broken authentication, misconfigurations, and logic flaws.
Phase 04
Authentication & Session
Identity and access controls
Reviewing login flows, token handling, MFA bypass scenarios, and session fixation vulnerabilities.
Phase 05
Business Logic
Rules the app was never designed to break
Finding abuse cases in workflows — race conditions, IDOR, price tampering, and privilege escalation through legitimate feature chains.
Phase 06
Infrastructure & Cloud
Servers, containers, and cloud config
Cloud misconfiguration, exposed metadata services, container escapes, and server-side vulnerabilities.
Phase 07
Reporting & Disclosure
From finding to fix
Writing findings in CVSS format, responsible disclosure workflows, and producing professional pentest reports.
Methodology
How to use this guide
A structured, AI-assisted approach to every pentest layer — from reconnaissance to reporting.
-
Pick a layer
Each OSI/pentest layer has its own section. Start at recon or follow the full sequence.
-
Understand the purpose
Every topic explains what you're testing, why it matters, and what a finding looks like.
-
Use AI as your copilot
Each topic includes ready-to-use AI prompt templates. You review, adapt, and execute.
-
Stay in scope
Ethics checklists and hard-stop rules keep every action inside authorized boundaries.