I’m building: "Tactical Web Exploitation"; a hands-on course covering the full attack chain: — starting from reconnaissance and service enumeration, all the way to post-exploitation and privilege escalation.

It includes things like:

DNS enumeration and recon workflows

Service exploitation (including RCE scenarios)

Practical Burp Suite usage (interception, intruder, repeater, etc.)

WordPress attack surface (enumeration, abuse, plugin-based RCE)

Post-exploitation and multiple privilege escalation paths

The focus is on realistic lab environments rather than isolated examples.

Before refining it further, I’d like to get feedback from people who are actively learning or practicing in this space.

I can give free access to a small number of testers in exchange for honest feedback — mainly around:

How realistic and useful the labs feel

Clarity of the attack flow from start to finish

Overall learning value

If you're interested, comment with your current level (beginner / intermediate / already practicing / etc.).

I’ll keep it limited to a few people so I can actually review the feedback properly.

Appreciate it.