Document From The Red Side

Built by a pentester,
for those who break things.

A space to learn penetration testing, no matter where you're stuck...

Explore Hub ↓
200+
Challenges
40+
Labs
10+
Contributors
Scroll to explore
Choose Your Path

TWO WAYS
TO LEVEL UP

01
Learn Path
LEARN
Start from zero or fill in gaps. Structured modules take you from concept to working exploit with simulations, guided labs, and a final exam.
  • ▸Curated modules covering cyber security fundamentals
  • ▸Interactive in-browser simulations no VM needed
  • ▸Guided hands-on labs with checkpoints
  • ▸Progress tracking and completion
02
Practice Path
PRACTICE
No instructions. No hints unless you pay for them. CTF challenges and vulnerable machines that don't care how long you've been hacking.
  • ▸Custom CTF challenges across Web, Crypto, Rev, Forensics
  • ▸vulnerable machines Easy to Hard
  • ▸Weekly new releases and CTF
  • ▸Community writeups
Learning Path

Learning Roadmap

Structured path from fundamentals to advanced offensive security.

Phase 01 — Foundations Networking, OS, Linux basics
01
02
Phase 02 — Reconnaissance OSINT, scanning, enumeration
Phase 03 — Web Security SQLi, XSS, CSRF, IDOR, bug bounty
03
04
Phase 04 — Exploitation Metasploit, privesc, post-exploit
Phase 05 — Active Directory Kerberos, BloodHound, lateral movement
05
06
Phase 06 — Red Team Ops Evasion, reporting, certs
View Full Interactive Roadmap
Research & Writing

Recent Blogs

Technical deep-dives, CTF writeups, and vulnerability research from the community.

Google Jules
Google Releases Jules: The Autonomous AI Coding Agent
Explore Google's latest frontier in agentic coding. Jules doesn't just suggest code—it executes tasks, fixes bugs, and audits your repo autonomously.
5 min read
Run Claude Code Completely Free
Master AI coding workflows using OpenRouter API and local Ollama hosting without spending a cent.
10 min
Hashcat Made Finding Modes Harder, So I Built a Tool to Fix It
Streamline your password cracking workflow with a dedicated Hash Identification Tool.
5 min
The Rise of Zero Trust Architecture
Implementing identity-centric security models in modern enterprise environments.
15 min
View All Articles
Open Source

Curated resources

Handpicked GitHub repos, cheat sheets, and practice environments vetted by the community.

📚
PayloadsAllTheThings
A massive collection of useful payloads and bypasses for web application security testing. Covers SQLi, XSS, SSTI, SSRF, and more with practical examples.
🔩
HackTricks
The comprehensive pentesting book covering everything from initial recon to full compromise. Invaluable for OSCP and red team engagements.
🧱
SecLists
The security tester's companion. Curated lists of usernames, passwords, URLs, sensitive data patterns, and fuzzing payloads.
🐚
GTFOBins
Curated list of Unix binaries that can be exploited to bypass local security restrictions, escape restricted environments, and escalate privileges.
Browse All Resources
The Developer

WHOAMI

I'm Karthik Parambil, a Security Researcher, Penetration Tester, and Developer with a strong passion for offensive security and vulnerability assessment.

With a background in penetration testing and a love for ethically “breaking things,” I created R3DEX a community hub dedicated to sharing knowledge and resources to help others grow in security.

GitHub LinkedIn
$ whoami
r3dex
$ cat skills.txt
• Web Pentesting
• Network Security
• Active Directory
• Vulnerability Research
• Tool Development
$ status --current
Building the next gen hacking hub...
_
Community

Ready to start
hacking?

Join 1k+ ethical hackers. Get access to resources.

Explore Resources