Learn Cyber Security & Hacking: a mobile app for security fundamentals

The useful test is whether an app makes you do something after each explanation. Reading about XSS builds nothing; being asked to find it does. Learn Cyber Security & Hacking is built that way — five-to-ten-minute lessons across network security, web vulnerabilities, cryptography and defense, each followed by a quiz and a CTF-style challenge, plus an AI mentor for the concepts that do not land. It is free to start on iOS and Android and assumes no IT background.

Yes, and it is the normal entry route. You do not need a degree: the proven path is fundamentals first — how networks, protocols, the web and encryption actually behave — then hands-on practice, then the concepts behind entry-level certifications. Security is one of tech's fastest-growing fields and is chronically short of people, so employers hire on demonstrated understanding. The barrier is consistency over months, not prior credentials.

Learning how attacks work is legal and is exactly what defenders do. Using those techniques against systems you do not own or have written permission to test is not, in most countries, regardless of your intent. That is the line ethical hacking sits on: same knowledge, authorised target. Study inside courses, contained challenges and labs you control, and never point anything at infrastructure that is not yours or explicitly authorised.

Start with how attackers actually operate — phishing, social engineering and malware — because it frames everything else. Then networking: protocols, firewalls, scanning and monitoring. Then web security, where injection and XSS explain most real breaches, followed by cryptography so you understand encryption and hashing rather than repeating the words. Defense comes next: hardening, incident response and security operations. Linux and the command line run underneath all of it.

Capture the flag is a practice format: you are given a contained exercise with a deliberate weakness and have to find it, recovering a hidden string as proof you did. It matters because security is a judgement skill built from repetition. A quiz confirms you remember a definition; a CTF challenge confirms you can apply it under slight pressure. Learn Cyber Security & Hacking puts one after each topic for that reason.

The common entry roles are SOC analyst, watching alerts and triaging what matters; penetration tester, testing systems with authorisation; and security engineer, building and hardening defenses. Understanding attacks is also valuable without changing job title — developers who know how injection and XSS work write code that resists them. The app is aimed at beginners heading toward those roles and covers career paths alongside the technical material.

It is free to download on the App Store and Google Play, and your first course is free with a daily AI Mentor allowance. Pro is a paid upgrade that unlocks every course, removes ads and makes AI Mentor unlimited. The app is listed under Education with a 4+ content rating, and its terms of use and privacy policy are linked from the store listing and at coddykit.com.

It does not advertise a full offline mode. What it does is stay usable on a poor connection: lessons load fast and keep working on flaky networks, which is the case that actually breaks study on a train or an underground commute. If you specifically need study material with no connection at all, treat that as unconfirmed rather than assuming it works.

The app is available in 22 languages. That matters more than it sounds in this subject, because most beginner security material assumes comfortable technical English, and having the explanation in your own language removes one of the two difficulties at once. Note that security terminology itself — protocol names, attack names, command-line syntax — stays in its standard English form, as it does in the industry.

No. Everything is taught for defense, education and legal, ethical use. Attack techniques appear so you can recognise and prevent them — how phishing and social engineering succeed, how injection and XSS flaws arise, how malware persists — always paired with the defense that stops them. The app does not produce working attack tooling and is not aimed at real targets. Practice happens inside its own contained challenges.