Free pentester course from scratch — Pentester Path

Want to become a penetration tester but don’t know where to start? Most material online either assumes you already know Linux and networking, or stops at flashy “hacking” with no real understanding. The Pentester Path at BreachRoad Academy takes you from your first terminal command to thinking like a professional security tester — calmly, and completely free.

The two videos below show how the Academy works: the progress system (XP and ranks) and a learning model built on scenarios rather than downloadable labs.

What you’ll learn on the pentester course

The program is 13 modules, ordered so each skill builds on the last:

• Fundamentals — what a pentest is, assets, threats, vulnerabilities and risk, the CIA triad, and the boundaries of legal testing.
• Workbench — Kali Linux in a virtual machine, first steps in the terminal, systems and networks (IP, TCP/UDP, DNS, HTTP, SMB).
• Reconnaissance — OSINT and passive recon, network enumeration with Nmap, footprinting common services.
• Web applications — information gathering, vulnerability assessment, authentication testing and common bug classes.
• Access and escalation — file transfers, shells and payloads, password attacks, and Active Directory enumeration and attacks.

We don’t teach “clicking a tool.” We teach understanding the mechanism: why something is vulnerable, how to confirm it safely, what the impact is, and how to fix and detect it.

How learning works — knowledge, not lab setup

Every module is built on solved, original scenarios around a fictional logistics company, Helios Freight. Instead of downloading packages and fighting environment setup, you work on ready material and learn to make decisions like on a real engagement:

1. Mechanism — what happens and why.
2. Decision — the smallest, safe evidence that confirms a hypothesis.
3. Fix and detection — how to close the gap and how to spot it in logs.

Each module ends with a scenario-based knowledge test with an explanation for every answer — you check that you truly understand, not just memorize.

XP, ranks and visible progress

Learning should feel rewarding, so the Academy works a little like a game. Completed lessons and passed tests earn XP points, which map to nine ranks — from Recruit, through Operator and Hunter, to Legend. On your dashboard you see a progress ring, completed sections, and the path to your next rank.

Who this course is for

• People switching careers into cybersecurity.
• Students and enthusiasts who want a structured path instead of tutorial chaos.
• Administrators and developers who want to think like an attacker to defend their own systems.

How to start

Go to breachroad.com/en/academy, sign in with a magic link (no password), and open the first module. There’s nothing to buy or install beyond your own Kali virtual machine. Your first knowledge module is ready right away.

You learn offensive security legally and from the ground up. First you understand the mechanism — then you make the decision.