Path structure
Curated lab order: web basics → injection → XSS → access control → authentication → advanced topics. Each lab unlocks after previous completion or is freely ordered within tier.
Time commitment
Beginner path: 4-8 weeks at 30 min/day. Certificate requires 100% path completion.
After beginner path
Intermediate paths, hard labs, CTF challenges, then external platforms for OS-level practice.