Enumeration

Exploitation

Privilege Escalation (must read)

Active Directory (must read)

Pivoting

Password Cracking

Buffer Overflow

Report Writing

OSWE Prerequisites

HTTP

Burp Suite

Information Gathering

OWASP Top 10

File Upload (must read)

SQL Injection (SQLi) (must read)

Cross-Site Scripting (XSS) (must read)

CSRF and SSRF

XML External Entities (XXE)

Insecure Deserialization

HTTP Request Smuggling

Other Attacks

Bug Bounty Report Writing

Hash Functions

MAC

AES (must read)

Diffie-Hellman

RSA (must read)

ECC

JWT (must read)

PRNG

SSL/TLS

Research (must read)

Python (must read)

The C Programming Language

Linux Command Line

Algorithms

The Linux Programming Interface

Computer Systems

Distributed Systems

Practical Packet Analysis

Static Analysis

Linux Exploitation

Windows Exploitation

Fuzzing

Python Bytecode

angr Template

Forensics

Steganography