000a.org is a friendly, resilient home for the curious — a place to learn how systems really work, sharpen real skills, and stay current with live security intel. We welcome and host them all.
Hacking is curiosity with skill attached. It's the discipline of understanding a system so deeply that you see what its builders missed — then choosing to make it better.
Ask how it works. Take it apart. The deepest understanding comes from breaking things in a place where breaking is safe.
The best of this culture is open. Write-ups, tools, and teaching lift everyone. You were helped — pass it on.
Power without ethics is just damage. Hack what you own or have permission to test. Disclose responsibly.
The field moves daily. The hacker doesn't memorize answers — they learn how to learn, forever.
Ten core territories. Each card is a map: what it is, what to study, and the best places to go deeper. Search to filter.
Where most of the action is. The browser is an attack surface and so is everything behind it.
Map it, understand it, then find the soft spot. Protocols leak more than people think.
Read the machine. Understand memory, then understand what breaks it.
Don't roll your own. But absolutely learn how the real ones break.
The quietest phase and often the most powerful. Information wants to be found.
Getting in is step one. Staying, escalating, and understanding the blast radius is the craft.
Radio, firmware, and physical interfaces — the attack surface you can hold in your hand.
The perimeter moved to IAM. Misconfigurations are the new open ports.
The newest frontier. Models are software — and software gets attacked.
The human is part of the system. Study it with consent, ethics, and a clear purpose.
No gatekeeping. If you can read this page, you can start today. Follow the steps in order.
Start here — no prior experience needed.
Build real attacker skills, ethically.
Go deep where your curiosity pulls you.
The essential kit, grouped by job. Free and open-source unless noted. Learn one well before collecting them all.
Reading is not skill. These are legal, intentionally-vulnerable playgrounds — hack them all you want.
Stay current. Curated, high-signal sources — threat intel, advisories, CVEs, cloud, and AI tradecraft. The live visitor watch and threat map live at redpatch.us ↗, our sister station.
The vocabulary you'll hear everywhere. Know these and you can follow any conversation in the field.
Leave your mark. Handles, war stories, hellos — all welcome. Be cool, be ethical.
Have a question or something you'd rather share privately? It goes straight to the operator.
// 000a.org provides educational information and links to public resources. You are responsible for how you use what you learn.