explaingit

onlurking/awesome-infosec

5,660Audience · developerComplexity · 1/5Setup · easy

TLDR

A curated list of free cybersecurity learning resources, university courses, practice labs, capture-the-flag competitions, and open books, organized for self-study from beginner to advanced.

Mindmap

mindmap
  root((awesome-infosec))
    Resource types
      Online courses
      Open books
      CTF platforms
      Practice labs
    Topics covered
      Cryptography
      Network security
      App security
      Offensive skills
    Institutions
      Stanford
      MIT
      UC San Diego
    Audience
      Self-learners
      Career changers
Click or tap to explore — scroll the page freely

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

Things people build with this

USE CASE 1

Find a structured sequence of free online courses from Stanford and MIT to go from zero to working cybersecurity knowledge without paying for a bootcamp.

USE CASE 2

Discover capture-the-flag platforms to practice offensive and defensive security skills on legal challenge environments year-round.

USE CASE 3

Build a self-study reading list from free open security books covering cryptography, network security, or application security.

USE CASE 4

Identify university-level security curricula available for free online to complement a self-directed learning plan.

Getting it running

Difficulty · easy Time to first run · 5min
No license is specified, the list is publicly accessible on GitHub but no explicit usage rights are granted.

In plain English

Awesome Infosec is a curated collection of learning resources for information security, organized into categories by type. It is a static reference list rather than a tool or codebase, intended for people who want to learn cybersecurity concepts, practice skills, or find structured curricula. The README itself is the product. The collection covers several distinct resource types. The massive open online courses section includes university-level courses available through platforms like Coursera, linking to offerings from Stanford (computer security, cryptography), MIT, UC San Diego, and others. Each entry includes a brief description of what the course teaches. Other sections cover academic courses, hands-on laboratories, capture the flag competitions, open security books available freely online, challenge sites for practicing specific skills, documentation collections, SecurityTube playlists, and links to related awesome-style lists in adjacent areas. Capture the flag competitions are timed hacking challenges where teams or individuals solve security puzzles to score points, the list links to platforms that host them year-round or archive past competitions. The list notes at the top that the resources are intended for cybersecurity professionals and educational use in a controlled environment, not for unauthorized access to systems. This is a standard disclaimer for security education resources that inevitably include material on offensive techniques. The format follows the conventions of the broader awesome-* ecosystem on GitHub: plain Markdown, sections linked from a table of contents, and community contributions welcomed via pull requests. The project carries no specific license beyond the implied open access of a public GitHub repository. The full README is longer than what was shown.

Copy-paste prompts

Prompt 1
I want to learn web application security from scratch using awesome-infosec resources. Build me a 12-week study plan using only the free resources listed, ordered from beginner to intermediate.
Prompt 2
Which CTF platforms in the awesome-infosec list focus on binary exploitation rather than web security? List and rank them for a beginner starting reverse engineering.
Prompt 3
I'm preparing for a cybersecurity job and have 3 months. Using the awesome-infosec list, design a study schedule that covers both defensive and offensive security skills.
Prompt 4
From the Stanford and MIT courses in awesome-infosec, which ones cover cryptography? Give me the recommended order and the prerequisite math I need before starting.
Open on GitHub → Explain another repo

← onlurking on gitmyhub — every repo by this author, as a profile.

Verify against the repo before relying on details.