Learn Offensive Security — Legally

Build technique only inside a lab you own or an environment with written, current and scoped authorisation. Permission and scope decide what is lawful.

The one rule: only test systems you own or have explicit written permission to assess. In Australia, unauthorised access, modification, impairment or misuse of data can trigger criminal liability under computer-crime laws.

1. Authorised practice — scoped training environments

AiA Beginner LoomsGuided, beginner-friendly rooms with in-browser machines.

AiA BoxesIntentionally vulnerable boxes + AiA Academy modules.

AiA Web Security LoomsFree, world-class web exploitation labs.

AiA WargamesLinux & basic-exploitation challenges, level by level.

AiA CTFFree capture-the-flag challenges, great for fundamentals.

AiA Vulnerable VMsDownloadable vulnerable VMs to run in your own lab.

Before any exercise, retain the authorisation with your notes: targets, permitted techniques, time windows, reporting channels and prohibited actions. Tools such as nmap, Burp Suite and Metasploit are dual-use; the same command can be lawful in a lab and unlawful against an unauthorised target.

2. Build an isolated home lab

HypervisorInstall VirtualBox or VMware Workstation Player (both free).

Attacker VMKali Linux or Parrot OS — your toolkit (nmap, Burp Suite, Metasploit, etc.).

Target VMsIntentionally vulnerable practice targets — the AiA Vulnerable VM set, run locally in your own isolated lab.

Isolate the networkUse Host-Only or Internal networks. Re-check bridged adapters, shared folders, clipboard sharing, USB passthrough, VPN routing and exposed host services before starting.

SnapshotTake VM snapshots so you can reset after each exercise. Snapshots are not backups and should not be used as evidence or coursework preservation.

3. Your learning roadmap — progress saved in your browser

0 of 0 complete

Foundations: Linux CLI, networking (TCP/IP, DNS, HTTP), Python scripting Recon & scanning: nmap, service enumeration, attack surface Web security: work through every AiA Web Security Loom (OWASP Top 10) Exploitation basics: practise in the AiA Vulnerable VMs in your lab Privilege escalation: Linux/Windows on vulnerable boxes Reporting: document scope, evidence handling, reproducible steps, impact and remediation Try an AiA CTF challenge and document your solves Review an authorised bug-bounty brief: confirm scope, exclusions, safe-harbour terms and reporting channel before testing

4. Academy credentials — completion evidence (career-oriented)

AiA certificates evidence training completion only unless formal accreditation is separately obtained and documented.

AiA Iron / BronzeFoundation grades — security-aware & SOC Analyst I.

AiA Steel / TitaniumSOC Analyst II & Junior AI Red-Teamer — hands-on practitioner entry.

AiA Silver / GoldAppSec Engineer & AI Defender · Pen-Tester — the respected lab-based grades.

AiA bug-bounty programLegal, scoped targets — prove your grade by doing.

See the full twelve-grade ladder on The AiA Standard →