xiry.

Learning · Website

Hacksplaining

Interactive, bite-sized lessons teaching developers how to exploit and fix vulnerabilities.

From the Xiry library · Updated 3 October 2026

Visit hacksplaining.com ↗

Hacksplaining is an interactive cybersecurity training platform that teaches secure coding through step-by-step vulnerability simulations. Learners act out realistic attacks like SQL injection, CSRF, and LLM prompt injection, followed by practical code fixes in languages like Python, JavaScript, and Go. It is completely free for individual learners, with paid plans available for engineering teams.

What it's for

  • Learn the mechanics behind the OWASP Top 10 vulnerabilities through hands-on simulations
  • Identify and fix security flaws like SQL injection and XSS in your own codebase
  • Understand GenAI security risks like prompt injection and LLM slopsquatting
  • Train engineering teams on secure coding standards to satisfy compliance requirements

Features

  • Over 45 interactive lessons covering OWASP Top 10 and emerging AI vulnerabilities
  • Hands-on attack simulations that show how vulnerabilities are exploited step-by-step
  • Side-by-side vulnerable vs. secure code examples in Python, JavaScript, Java, and Go
  • Short post-lesson quizzes to reinforce knowledge and test retention
  • Bite-sized 15 to 30-minute modules designed for self-paced learning
  • Team dashboards, progress tracking, and compliance reporting tools

Pricing

Freemium. Free for personal use; paid plans with 14-day free trial for teams

Details

Type
Website
Category
Learning
Topic
Cybersecurity
Open source
No
Platforms
Web
For
Software developers, engineering teams, and aspiring cybersecurity professionals
Alternative to
PortSwigger Web Security Academy, TryHackMe, Secure Code Warrior
Tags
cybersecurity, appsec, owasp, secure coding, developer tools, learning

Why it was saved

  • @ai_arton, 22 January 2025: Provides practical, step-by-step educational demos showing exactly how common vulnerabilities occur and how developers can prevent them.

Related

Updated