Watch the full video
Prefer watching? This post is based on my YouTube video.
Part 1: Recon and narrowing the scope
- Identify a target concept, topic, or thing you want to learn. For example: “I want to improve my bug bounty skills.”
- Wrap this topic into a “project” or “lab.”
- Get direct instructions for the setup, but not the execution of the lab.
Prompt
The ideal result
The AI goes out and finds resources such as Bugforge.io, Burp Suite labs, TryHackMe, and even online resources, guides, or cheat sheets. It ideally gives step-by-step instructions for each platform. For example, on TryHackMe:Navigate to tryhackme.com, create an account, and join the “NahamStore” room. If you get stuck, there are many walkthroughs online, including one from the creator, NahamSec.
Part 2: Execute and iterate
The core idea: you only learn cyber by doing and failing fast. Friction is good. Here’s the loop:1
Execute
Do the thing. Write the exploit, run the nmap scan, trace the packet, respond to the incident.
2
Get stuck
Move forward until something breaks or you don’t know what to do next. Then ask yourself: what happened, and why did I get stuck?
3
Ask AI specific failure questions
Detail the mismatch between the expected and actual system behavior.No full solutions. Only next steps and possibilities.
Prompt
4
Retry
Take ONE suggestion, apply it, and run the test again.
5
Understand
Explain it in your notes in 1–2 sentences: “This worked because ___.”If you can’t explain it like you would to a 5 year old, you don’t truly know it yet. This is also known as the Feynman Technique.To reinforce your learning, validate with the LLM of your choice. Put your reasoning in and ask, “Is this reasoning correct?”
Wrapping up
AI should give you direction if you’re lost, but not the entire map. That is something that you can figure out yourself. The whole idea of this framework is a loop:- You execute
- You fail
- AI refines your thinking
- You execute again
