Classroom
Read-only Stage 1 surface for 23 Virtus Cyber Academy courses. Each course landing lists its weekly modules, labs, and capstone packet. Interactive embeds (the nine Phase-1 visualizers) appear at the points in the curriculum that introduce them.
Foundations
Where every track starts. Numbers, bytes, hex, and the systems thinking the rest of the program builds on.
FND-101
Pipeline entry course. No prerequisites beyond basic algebra. ~105 hours total across 12 weeks. Audience: high-school and homeschool students, career changers, curious adults.
SPK-101
Gateway / Pre-CSA-101 motivational on-ramp. No-prereq introduction to game emulators, ROM hacking, and the 6502 historical anchor, all on a laptop, no hardware required. ~50 hours
Hardware
Circuits, microcontrollers, and the physical substrate digital logic actually runs on.
Networking
Packets, protocols, and the wire-format reading skills that anchor everything from blue-team detection to red-team C2.
Security
Threat modeling, cryptography, and the security-mindset shift from how-it-works to how-it-fails.
Reverse Engineering
Disassembly, dynamic analysis, and the firmware-archaeology skills the SB6141 capstone exercises end-to-end.
Architecture
Build a CPU. Then build a compiler. Then build an OS. Then watch a Jack program you wrote run on FPGA silicon you wired.
CSA-101
The academy's flagship hardware-FPGA course. Students build a working RV32I-Lite CPU on a Tang Primer 25K FPGA, write its assembler, write its static linker, write its VM translato
CSA-201
CSA-101 closed at the system line: a Tang Primer 25K running an OS the student wrote, on a CPU the student synthesized. Every layer the chapter omitted was named. CSA-201 pays thos
Topical Modules
Single-week evergreen-after-disclosure modules too small for a full course track. Current CVEs, technique clinics, and cross-track micro-modules.
Other
Courses on disk but not registered in tracks.json. Add them to the registry to position correctly.
ADV-101
Belt-4 deep-technical. ~125 hours across 13 weeks. The course where students take one CVE, reproduce it under authorization, and ship a CERT/CC-grade tool plus disclosure report. P
ADV-102 first draft
ADV-102 is the LLM-era variant of ADV-101's CVE-to-Tool pedagogy. The anchor target is CVE-2025-65106 (LangChain Jinja2 SSTI): reproduce it end to end, build a detection tool, and
AI-101
AI-101 gives the security practitioner a working mental model of LLMs as attack surface, builds the vocabulary to read OWASP LLM and ASI advisories fluently, and delivers hands-on
AI-201
AI-201 moves from individual-vulnerability awareness (AI-101's OWASP LLM Top 10 frame) to production-pentest discipline. Students scope agentic-system engagements, identify trust b
AI-301
AI-301 is the capstone of the AI track and the bridge between the academy's two security strands. Students arrive having built a complete computing stack from NAND to OS (CSA-101),
CSA-110
You built a 6502 on an FPGA. You wrote the toolchain that targets it. CSA-110 runs the same arc again, but the chip is a 32-bit RISC you design from scratch, the toolchain targets
CON-101 first draft
CON-101 points the FPGA methodology at the retro-computing community's soft cores. Inherit NES, Game Boy, and SNES cores, study their authors' choices, modify them, and finish by s
FND-102
Foundation Stream, Belt 1. Sequel to FND-101. No hardware kit required. ~125 hours total across 14 weeks plus a presentation week. Audience: students who have a model of the machin
NET-201
NET-201 pays the forward promises NET-101 made. Every protocol NET-101 introduced at first-encounter depth arrives here at production-grade inspection depth. A student who finishes
NET-301
NET-301 takes the NET-201 graduate -- a student who can architect a 30-employee network, run its routing protocols, sign its DNS zones, and monitor traffic with Suricata signatures
PEN-101
The offensive-track midpoint. Students arrive with Python (FND-102), networking (NET-101), and security principles (SEC-101). They leave with a complete engagement methodology: rec
RF-201
WIR-101 closed at the wireless-pentest engagement. Every modulation, every frame format, every spread-spectrum trick it named was introduced and left. RF-201 pays the bills. Modula
RF-301
RF-201 closed at the protocol-RE engagement. RF-301 takes the same student to carrier scale, satellite scale, cellular scale, and adversary scale. Advanced DSP at the depth a worki
WIR-101
Wireless is everywhere and mostly invisible. The course teaches licensed wireless pen testers how to characterize and test the wireless security posture of a client environment --
Self-Check Quizzes
Nine predict-then-verify quizzes across five courses (FND-101 numbers, CSA-101 chapters 1 / 3 / 4 / 7 / 8, NET-101 TCP handshake, SEC-101 cryptography, SPK-101 bitplanes). Each question pairs a prompt with an embedded Phase-1 visualizer: predict the answer by hand first, then load the matching scenario in the sandbox to verify. Progress saves to your browser via localStorage; nothing leaves your device.
About this surface
The public site at virtuscyberacademy.org stays in catalog and intro register: a student browsing publicly sees what each course is and what it teaches. The classroom you are reading now is where the actual weekly content lives. Stage 1 is read-only. Stage 2 will add authentication and progress tracking.
Source markdown is in the Git repository at courses/<slug>/. The renderer that produces these pages is at courses/_pipeline/render.py.