Reference

Resources

One hub for tools, commands, vulnerabilities, OSINT, playbooks, and the academy library. These support your courses and labs — they are not alternate curricula.

Tools

102 tools

Study reference for common security tools — practice stays in Labs.

Open →

Commands

176 entries

Annotated command examples tied to labs and courses.

Open →

Vulnerabilities

47 entries

Knowledge base of vulnerability classes with remediation notes.

Open →

OSINT

OSINT module

Open-source intelligence methods and workflow notes.

Open →

Playbooks

Workflows

Professional workflows — scope, steps, evidence, reporting, remediation.

Open →

Academy library

45 links

Curated external learning links (PortSwigger, THM, docs).

Open →

Where this fits the journey

Start from the Learn hub, pick a path, or open a course.
Practice in Labs.
Use this Resources hub when you need a lookup — then return to the lesson or lab.

Nested aliases (/resources/tools, …) redirect here so bookmarks keep working.

Industry frameworks (align, don’t copy)

Do not copy entire external courses. Use frameworks as references; ship original CYNARKS explanations, labs, assessments, and projects; attribute external resources in the Academy library.

NIST

NIST NICE Framework

Map tasks/knowledge/skills to Career explorer roles and Passport competencies — original CYNARKS lessons, not a NICE dump.

OWASP

OWASP Top 10:2025

Current web risk language in /vulns and Web AppSec lessons. Keep 2021 codes as historical only.

OWASP

OWASP Web Security Testing Guide

Structure authorized web testing methodology in playbooks and AppSec labs — CYNARKS write-ups and labs are original.

MITRE

MITRE ATT&CK

Threat intel / SOC detection mapping and lab scenarios — attribute ATT&CK; teach with CYNARKS cases.

NIST

NIST Cybersecurity Framework 2.0

Enterprise defensive framing for GRC and Security Analyst paths — Identify/Protect/Detect/Respond/Recover language.

PortSwigger

PortSwigger Web Security Academy

Optional deep practice after CYNARKS web labs — linked in Academy library with lesson supplements, not copied.

TryHackMe

Guided external practice paths — library links map each resource to a CYNARKS course/lesson.

Recommended coverage (modules first)

Prefer deepening existing courses over adding competing catalogs. Agentic AI stays advanced-only.

Active Directory Securityhigh · module-in-existing
AD architecture, Kerberos, LDAP, GPO, identity hardening — authorized AD lab assessments only.
Host: ethical-hacking-penetration-testing
Cloud Security Engineeringhigh · existing-course
AWS/Azure IAM, logging, storage, CSPM, containers/K8s — deepen the existing Cloud Security course.
Host: cloud-security
Malware Analysis & Reverse Engineeringhigh · module-in-existing
Static/dynamic analysis, sandboxing, file formats, memory analysis, defensive detection.
Host: digital-forensics-incident-response
Threat Intelligence & Detection Engineeringmedium · module-in-existing
IOC analysis, hunting, detection rules, ATT&CK mapping, YARA and Sigma.
Host: soc-analyst-blue-team
DevSecOps & Software Supply Chainmedium · module-in-existing
CI/CD security, SAST/DAST/SCA, SBOM, secrets, containers, pipeline hardening.
Host: web-application-security
IoT, OT & ICS Securitymedium · module-in-existing
Embedded/firmware, industrial networks, SCADA, defensive OT architecture.
Host: network-security
Agentic AI Security — Advanced Trackstrategic · existing-course · advanced only
Multi-agent architectures, tool-calling risks, agent permissions, isolated red-team sims. Advanced specialization — not a beginner hacking course.
Host: agentic-ai-security

Build order (don’t ship everything at once)

Phase 1 — Fix the foundation in-progress

[done] Course-to-lab mapping (EH / Web / Bounty / AI separated)
[done] Pricing & entitlement matrix
[done] One curriculum graph (courses ↔ paths ↔ careers ↔ labs)
[done] Roadmap stages & prerequisites integrity
[done] Standardized course detail pages
[done] OWASP Top 10:2025 current mappings
[in-progress] Central lesson content registry (reuse, not duplicate)

Phase 2 — Student experience in-progress

[done] Lesson template + TCP/IP exemplar
[done] Module/lesson navigation in player
[done] Dashboard / My Learning / Passport separation
[planned] Roll lesson template across all modules
[in-progress] Connect progress → achievements with evidence gates

Phase 3 — Practical learning in-progress

[done] Centralized lab catalog + course assignments
[planned] Guided practical exercises per module
[in-progress] Capstone projects on path journeys
[planned] Evidence submission & validation

Phase 4 — Career ecosystem in-progress

[done] Career explorer (11 roles)
[done] Interview kits + cert prep vs CYNARKS certs
[planned] Portfolio / projects surface
[planned] College cohort dashboard

Phase 5 — Advanced specialization planned

[planned] AD / malware / detection modules inside existing courses
[planned] Cloud engineering depth modules
[in-progress] Agentic AI advanced track (not beginner)
[planned] Threat intel & enterprise architecture depth

Preserve: 13 course concepts · 42-level curriculum spine · Practical lab system · Knowledge bases (vulns, OSINT, tools) · Career mapping · Agentic AI as advanced specialization

Do not: Add more competing top-level pages · Copy PortSwigger / TryHackMe / NIST courses wholesale · Present Agentic AI as beginner hacking