
If you are breaking into cybersecurity or aiming to level up your bug bounty game, The XSS Rat offers one of the most hands-on, community-driven training catalogs in application security. Known for his no-nonsense “Uncle Rat” methodology, his courses cut through theoretical fluff to focus directly on real-world reconnaissance, exploit chaining, and practical pentesting workflows.
Below is a complete overview of the full course catalog, spanning foundational networking, deep-dive vulnerability handbooks, certification tracks, and methodology guides.
Syllabus
-
000: Bad Bash! – By The XSS Rat and Ikajakam
-
000-B: The basics of the web, HTML CSS and JS
-
001: The Rat’s Portscanning Cookbook – The Ultimate Guide To Portscanning
-
002: Core Networking Concepts for Ethical Hackers
-
003: Uncle Rat’s Ultimate Bug Bounty Guide – Part 1 – Main App Hacking Introduction
-
004: Uncle Rat’s Ultimate Bug Bounty Guide – Part 2 – Broad Scope And API Hacking
-
005: Uncle Rat’s Brutal Methodology Master Guide
-
006: [BBG] Uncle Rat’s Top 10 Bug Bounty Tips – Essential Bug Bounty Tips For Every Level
-
011: Security Zines: CSRF
-
013: CAPIJ – Certified API Hacking Junior
-
015 – Certified Network and Web app Pentesting Professional – CNWPP
-
016: CNWPP exam voucher 2
-
017: CNWPP – Exam voucher + Materials
-
018: CNWPP Official PDF Guide
-
019 Pentesting Guide A-Z
-
020: Uncle Rat’s XSS Guide With AI Integration
-
021: Uncle Rat’s XXE Guide
-
022: The ultimate guide to finding BAC and IDOR vulnerabilities
-
022-2: Uncle Rat’s Ultimate Guide To Broken Access Control [Owasp Top 10 Hit]
-
023: Web Application Firewall Handbook (WAFs explained)
-
031: Advanced Recon And Ethical Hacking By James Beers
-
040: Uncle Rat’s Burp Suite Workflow Handbook
-
050 Uncle Rat’s Ultimate OSCP prep guide and course
-
060: Get started with android bug bounties
-
070 – NIST 800-61, A dummy’s guide to incident response management – Rev. 2
-
084 – CMWAP – Certified Modern Web App Pentester
-
900 – The endless updates bundles – ALL cybersecurity courses, certs and lives. Even future ones.
-
CAPIE – Certified API Hacking Expert
Security Education
OffSec
iNE
Antisyphon
EC-Council
Applied Network Defense
Kaspersky
Sektor7
CompTIA
TCM Security
BlackHat
13Cubed
Dark Vortex
Enciphers
Forty North
Cyber warfare Labs
Maltrak
Scorpio Software
Security Onion
Zero Point Security
SentinelOne
Altered Security
SpecterOps
Pentester Academy
CQURE
PluralSight
StationX
Cybr
موسسههای دیگر