# Hacksplaining

> Interactive, bite-sized lessons teaching developers how to exploit and fix vulnerabilities.

Hacksplaining is an interactive cybersecurity training platform that teaches secure coding through step-by-step vulnerability simulations. Learners act out realistic attacks like SQL injection, CSRF, and LLM prompt injection, followed by practical code fixes in languages like Python, JavaScript, and Go. It is completely free for individual learners, with paid plans available for engineering teams.

Website: https://hacksplaining.com/

## What it is for

- Learn the mechanics behind the OWASP Top 10 vulnerabilities through hands-on simulations
- Identify and fix security flaws like SQL injection and XSS in your own codebase
- Understand GenAI security risks like prompt injection and LLM slopsquatting
- Train engineering teams on secure coding standards to satisfy compliance requirements

## Features

- Over 45 interactive lessons covering OWASP Top 10 and emerging AI vulnerabilities
- Hands-on attack simulations that show how vulnerabilities are exploited step-by-step
- Side-by-side vulnerable vs. secure code examples in Python, JavaScript, Java, and Go
- Short post-lesson quizzes to reinforce knowledge and test retention
- Bite-sized 15 to 30-minute modules designed for self-paced learning
- Team dashboards, progress tracking, and compliance reporting tools

## Pricing

Freemium. Free for personal use; paid plans with 14-day free trial for teams

## Details

- Type: Website
- Category: [Learning](https://xiry.app/topics/learning.md)
- Open source: no
- Platforms: Web
- For: Software developers, engineering teams, and aspiring cybersecurity professionals
- Alternative to: PortSwigger Web Security Academy, TryHackMe, Secure Code Warrior
- Tags: cybersecurity, appsec, owasp, secure coding, developer tools, learning

## Why it was saved

- [@ai_arton, 22 January 2025](https://www.instagram.com/reel/DFJOJyPyr3t/): Provides practical, step-by-step educational demos showing exactly how common vulnerabilities occur and how developers can prevent them.

## Related

- [9 ChatGPT Prompts for Accelerated Learning](https://xiry.app/resources/9-chatgpt-prompts-for-accelerated-learning): A collection of reusable ChatGPT prompts designed for studying and mastering topics (Prompt, Free)
- [Advanced Reading List Prompt](https://xiry.app/resources/advanced-reading-list-prompt): ChatGPT prompt to generate annotated reading lists for complex subjects (Prompt, Free)
- [Analytical Skills Enhancement Prompt](https://xiry.app/resources/analytical-skills-enhancement-prompt): ChatGPT prompt to generate tailored exercises, puzzles, and analytical drills (Prompt, Free)
- [h4cker](https://xiry.app/resources/h4cker): Curated cybersecurity repository covering ethical hacking, defense, AI security, and labs (GitHub repo, Open source)
- [Memory Improvement Study Guide Prompt](https://xiry.app/resources/memory-improvement-study-guide-prompt): ChatGPT prompt for generating customized memory techniques and study schedules (Prompt, Free)
- [Naval Ravikant's Recommended Books](https://xiry.app/resources/naval-ravikant-s-recommended-books): Six essential book recommendations curated by Naval Ravikant with endorsement quotes (List, Free)

Updated 3 October 2026. Page: https://xiry.app/resources/hacksplaining

Make your own library: Xiry takes your saved reels, tweets, Reddit bookmarks and Watch Later videos, makes them searchable and pulls the useful stuff out, like this library. It's invite-only for now; join the waitlist at https://xiry.app/#waitlist.