New · Personalized to you Open your portal
Rolling Thunder Security // Cybersecurity Knowledge Hub

Rolling Thunder Security

An introduction to the field built around doing the work, not just reading about it.

Welcome

Rolling Thunder Security
Hands-On Cybersecurity Knowledge Hub
  • CISSP
  • CCSP
  • CEH
  • Security+

Welcome to Rolling Thunder Security, a hands-on cybersecurity knowledge hub. It provides a base knowledge on a wide variety of topics in cybersecurity, similar in scope to what a Security+ certification would cover. It covers topics from Network Security, to Cryptography, to Social Engineering and Phishing.

This site is an expressive outlet to give you a place to visualize cybersecurity concepts, to practice performing attacks, or to be interactive with data being sent through the OSI layers being encapsulated and decapsulated. You will be right there in the action with this website.

Cybersecurity is a wide field. This hub covers a lot of ground — frameworks, cryptography, networks, social engineering, web attacks — and it is normal to feel that breadth as overwhelming. Take it at your own pace. Move through the modules in whatever order serves you, revisit the visualizations and games when something does not click, and trust that the picture comes together piece by piece.

This site makes no money, runs no ads, and collects no data. It is intended to be an educational tool that gives learners another form of material to study if the more traditional methods are not working.

— Rolling Thunder Security

Welcome

Approach
Learn by doing
Scope
Security+ aligned
Format
Hands-on labs
Domains
6 modules
SQLi labs
18 techniques
Practice
10 games & tools

Cybersecurity is rarely defeated by breaking the strong thing. AES-256 holds. SHA-256 holds. Modern TLS holds. Attackers know this, so they go around the strong thing. They steal the key from a sticky note, trick the help desk into a password reset, slip a malicious link past an inattentive reader, or find one forgotten input box on one forgotten page that lets them ask the database whatever they want.

This site teaches you to think the same way. You will read about the controls, then you will sit at a keyboard and do the work. You will evaluate real phishing emails, trace the protocols that delivered them, and find the exact mechanisms the attacker leaned on. You will write SQL injection payloads against vulnerable applications. You will encrypt and decrypt, hash and verify, capture and inspect. By the end you will know the fundamentals because you will have used them.

Course & class tools

These tools are tied to a specific class rather than general cybersecurity knowledge. They live here for now and will move to a dedicated course site later.