Ravi Sir's Cyber Security Cards › Revision Cards
Practice Platforms
Practice Platforms Websites where you practise safely and legally: TryHackMe , Hack The Box , PortSwigger Web Security Academy . 3 practice sessions, 1 write-up of what you solved, 1 revision of a weak area. Finishing a room by following a walkthrough. That is not learning. Try on your own for 30–45

Read card text
What this card says
What it is
Websites where you practise safely and legally: TryHackMe, Hack The Box, PortSwigger Web Security Academy.
A good weekly routine
3 practice sessions, 1 write-up of what you solved, 1 revision of a weak area.
Common mistake
Finishing a room by following a walkthrough. That is not learning.
Try on your own for 30–45 minutes first, then take just one hint.
| Platform | Type | Best for |
|---|---|---|
| TryHackMe | Guided rooms in the browser, free and paid tiers | Absolute beginners, SOC and pentest paths |
| Hack The Box (Academy and Labs) | Machines and structured modules | Intermediate pentest practice |
| PortSwigger Web Security Academy | Free web labs by the makers of Burp Suite | OWASP and web testing (Chapter 29) |
| OWASP Juice Shop, DVWA | Vulnerable apps you run yourself | Local web labs (Chapter 21) |
| VulnHub, Metasploitable | Downloadable vulnerable VMs | Offline lab practice (Chapter 18) |
Learn more in the lesson: 35.3 Practice Platforms