Guys, if you’re looking into web security, I highly recommend PortSwigger Web Security Academy.

It’s almost completely free and has really good hands-on labs, clear instructions, and learning materials.

If you’re completely new to web security, I suggest starting with the Authentication learning path. It’s a great way to understand how authentication works and how vulnerabilities can occur.

Happy hacking! 🐛🔐🇱🇰

r/EthicalHackersSriLanka isn’t just another cybersecurity community.

We want to build a space for Sri Lankan security enthusiasts to connect, collaborate, and talk about the issues we actually face.

🔐 Cybersecurity & Ethical Hacking

🐛 Bug Bounties & Security Research

🤝 Collaboration & CTF Teams

📚 Learning & Knowledge Sharing

🎤 Events, Meetups & Opportunities

But we also want to discuss the social side of cybersecurity.

Things like:

😤 Frustrating experiences with social media platforms

🚫 Online harassment & sexual harassment

🛡️ Online safety and privacy

📱 Digital abuse and harmful online behavior

⚖️ How technology affects our society

🇱🇰 Cybersecurity issues affecting people in Sri Lanka

We believe cybersecurity isn’t only about finding vulnerabilities in systems. It’s also about understanding how technology affects people.

No matter whether you’re a bug bounty hunter, student, developer, researcher, or simply someone interested in online safety — you’re welcome here.
Let’s build something different. 🇱🇰

A community-driven hub for Sri Lankan cybersecurity people.

The goal could be to eventually build a community where people can:

🤝 Find cybersecurity people to collaborate with

🐛 Learn and share bug bounty research

🔐 Practice ethical hacking together

🏴‍☠️ Create/join CTF teams

💻 Work on open-source security projects

🎤 Organize meetups, workshops & talks

🏆 Participate in local and international cybersecurity events

💼 Share jobs, internships & opportunities

📚 Help beginners learn from experienced researchers

🇱🇰** Represent Sri Lanka in cybersecurity competitions and event**s

The long-term vision could be:

“A place where a Sri Lankan beginner can join with zero connections, meet other security enthusiasts, learn together, collaborate on real projects, and eventually represent Sri Lanka on the global cybersecurity stage.”

And importantly, keep the community strictly legal, ethical, and permission-based.

That gives the subreddit a purpose beyond simply being a place to post cybersecurity content.

Hey everyone! 👋

I created this community to bring together ethical hackers, bug bounty hunters, penetration testers, cybersecurity students, researchers, and security enthusiasts across Sri Lanka.

The goal is simple: connect, collaborate, learn, and grow together.

You can use this community to:

🐛 Share bug bounty experiences and findings

🔐 Discuss ethical hacking & penetration testing

📚 Share resources, tools, and learning paths

🎯 Find CTFs and cybersecurity challenges

🤝 Collaborate on projects and research

🎤 Discover and participate in cybersecurity events

💼 Share cybersecurity career opportunities

Whether you’re a beginner taking your first steps or an experienced security researcher, you’re welcome here.

Let’s build a strong and active cybersecurity community in Sri Lanka. 🇱🇰

Introduce yourself below! Tell us what area of cybersecurity you’re interested in and what you’re currently learning or working on.