Tutorials & write-ups

A plain-language introduction to what cybersecurity is, the CIA triad, common threats and the main career and learning paths.

The practical and legal differences between ethical (authorised) hacking and malicious hacking, and how to practise legally.

The Linux concepts and commands every security learner needs: file system layout, permissions, processes, networking and text searching.

IP addressing, subnets, ports, TCP vs UDP, ARP, NAT and common protocols — the networking knowledge that underpins security analysis.

How HTTP requests and responses work, what HTTPS and TLS add, and which headers and settings improve web security.

The DNS lookup process, the main record types, caching and TTL, and the security issues defenders should know (spoofing, DNSSEC, tunnelling).

The main classes of web vulnerabilities (injection, XSS, broken access control, CSRF) with simple examples and how developers defend against them.

A plain-English walkthrough of the OWASP Top 10:2025 risk categories with defences, plus how to use the list.

What CVE IDs, NVD, CWE and CVSS mean, how to read a score and vector, and why you should also check KEV and exploitation evidence.

A step-by-step method to read vendor and government security advisories and decide what action to take.

A hands-on introduction to Nmap: host discovery, port scanning, service detection, saving output and the legal rules for scanning.

Learn to capture and read network traffic with Wireshark: capture vs display filters, following streams, and spotting cleartext credentials in a practice capture.