The Exploit HQ

Tutorials

Nmap for Beginners

Scan your own network, read the results, and understand what every port state means — one command at a time.

  1. Nmap for Absolute Beginners: Your First Scan
  2. Nmap for Beginners: What's Running Behind Open Ports (Part 2)
  3. Nmap for Absolute Beginners: Open, Closed & Filtered Ports
  4. Nmap for Beginners: Scan Your Whole Home Network (Part 4)
  5. Nmap for Beginners: Scan Only the Ports You Want (Faster Scans)
  6. Nmap for Beginners: Save & Read Your Scan Results (-oN, -oA)

Web Application Security for Beginners

Five classic web flaws, exploited live in a safe lab, and how defenders stop each one.

  1. Web Application Security for Beginners — Start Here
  2. Broken Access Control & IDOR — Web Application Security for Beginners
  3. File Inclusion & Path Traversal — Web Application Security for Beginners (LFI/RFI)
  4. Information Disclosure Vulnerabilities Explained — Web Application Security for Beginners
  5. Parameter Tampering Explained — Web Application Security for Beginners
  6. Authentication Bypass Explained — Web Application Security for Beginners

The 10 Commands

Ten commands per topic that security beginners actually use, shown working.

  1. The 10 Nmap Commands Most Used in 2026
  2. The 10 Commands That Show You How Vulnerability Scanning Works in 2026
  3. Practical Malware Analysis: The 10 Commands You Need in 2026
  4. The 10 Linux Commands Every Security Beginner Uses in 2026
  5. The 10 curl Commands Every Security Tester Uses in 2026
  6. 10 Linux Commands That Expose Hidden Malware

Explained Live

One attack technique per video, shown happening, then how to defend against it.

  1. Password Cracking Explained — See It Happen Live
  2. How SQL Injection Works — See It Happen Live
  3. XSS Explained — See a Website Get Hijacked Live
  4. Kali Linux for Absolute Beginners — Your First Hour in the Terminal

Wireshark for Beginners

Capture traffic and learn to spot what should not be there.

  1. Wireshark Packet Sniffing for Absolute Beginners — Catching a Plaintext Login
  2. Wireshark for Beginners Part 2 — Spot Suspicious Traffic on Your Network