PWNMI
Ethical Hacking Education

Learn to hack — the legal way.

Straightforward roadmaps, hands-on tool walkthroughs, and CTF lab write-ups for people who want real offensive security skills, not just theory. No gatekeeping, no fluff.

Start the Roadmap Browse Guides

Where to start

Four pillars. Pick the one that matches what you're trying to do right now.

Roadmaps

Structured learning paths

Zero to your first cert (OSCP, Security+, eJPT) — what to learn, in what order, and what to skip.

 Guides

Tool walkthroughs

Hands-on guides for the tools you'll actually use: Nmap, Burp Suite, Linux fundamentals, and more.

 Labs

CTF write-ups & CVE labs

TryHackMe and HackTheBox rooms, plus real CVEs you can reproduce in an isolated local lab — broken down by approach, not just the flag.

 Toolkit

Gear that earns its spot

Software and hardware picks for a working practitioner's kit. Field-tested, not just affiliate filler.

Latest write-ups

Guides

Nmap Fundamentals: Your First Recon Tool

A practical introduction to Nmap — the commands you'll actually use for host discovery, port scanning, and service enumeration.

 Guides

Linux Fundamentals Every Beginner Hacker Needs

The Linux commands, permissions model, and habits that show up constantly in offensive security work — covered once, properly.

 Guides

Burp Suite Fundamentals: Intercepting and Testing Web Traffic

How to set up Burp Suite, intercept requests through the proxy, and use Repeater and Intruder to test a web application.

 Toolkit

Best Wi-Fi Adapter for Wireless Pentesting

What to look for in a Wi-Fi adapter for wireless security testing — monitor mode, packet injection, and chipset compatibility.

 Toolkit

Best VPN for Security Practitioners

When a VPN actually matters for security research and remote testing work, and what to look for in one.

 Toolkit

Raspberry Pi for Home Labs and Security Projects

What a Raspberry Pi is actually useful for in a home lab or on authorized engagements, and what to look for when buying one.

⚠️ Use This Responsibly

Everything on PWNMI is for education and for use on systems you own or are explicitly authorized to test — home labs, CTFs, and bug bounty programs in scope. Accessing systems without authorization is illegal. PWNMI does not support or condone using these skills against systems you don't have permission to test.