About this site
This is a set of cybersecurity lessons I write as I relearn the subject. I’m studying for the CEH, and I’ve found that the fastest way to tell whether I really understand something is to try to explain it to someone who has never seen it before. So each topic I cover becomes a lesson here.
Who it’s for
Everyone, beginners very much included. If you have never opened a terminal, you can still read any lesson on this site and come away understanding the idea. Jargon gets defined where it appears, and every lesson ends with a few questions so you can check yourself.
If you are further along, the lessons are short enough to skim and the How to defend section of each one is the part worth your time.
How a lesson is built
Every lesson follows the same shape, so you always know where to look:
- A one-sentence summary of the whole topic.
- Explain it simply — the idea in plain language, usually with an everyday comparison.
- An animated illustration showing the mechanism rather than decorating the page.
- Key terms — the words you need, defined once.
- How to defend — what actually reduces the risk.
- Test yourself — a few questions with the answers hidden until you want them.
Where the words come from
Every lesson is written in my own words, from my own understanding. Nothing here is copied from EC-Council CEH courseware or any other training material — no text, no diagrams, no labs. If a lesson leans on a public standard or a vendor’s documentation, it says so and links out.
On practising
Learning offensive security means trying things. Try them on your own machines, on a lab you built, or on a system whose owner has given you written permission. Practise only on systems you own or have written permission to test. Unauthorised access is a crime under Tanzania’s Cybercrimes Act, 2015 — and the same is true, under different names, almost everywhere else.