A single repository containing real-world security labs designed to demonstrate practical skills used by security analysts, pentesters, and contractor-based testers.
Each lab is scoped, ethical, and documented with clear findings.
🎯 What This Shows
- Hands-on security testing (not theory)
- Ability to follow scope and methodology
- Clear written communication
- Realistic security workflows
🧪 Lab Format (Consistent Across All Labs)
Each lab includes:
- Objective
- Scope
- Tools used
- Findings
- Artifacts
- Short written deliverable
🧩 Labs Overview
| Lab | Focus |
|---|---|
| Lab 1 | Recon & Surface Area Discovery |
| Lab 2 | Login & Authentication Enumeration |
| Lab 3 | Input Validation & XSS (Safe Testing) |
| Lab 4 | Session & Cookie Security |
| Lab 5 | OSINT & Public Exposure |
| Lab 6 | Metadata Analysis |
| Lab 7 | Credential Exposure Search |
| Lab 8 | Phishing Email Analysis |
| Lab 9 | Look-alike Domain Detection |
| Lab 10 | Cloud IAM Misconfiguration |
| Lab 11 | MFA & Conditional Access |
| Lab 12 | OAuth / App Permissions |
| Lab 13 | Mini Pen Test Report |
| Lab 14 | Executive Summary Writing |
| Lab 15 | Scope & Rules of Engagement |
🛠 Tools Used
WHOIS • DNS • crt.sh • DNSDumpster • Browser DevTools • OSINT tools • Cloud IAM reviews
📄 Reporting Style
- Short, clear findings
- Risk-aware, not alarmist
- Actionable recommendations
All testing performed against intentionally vulnerable environments, public test targets, or owned assets.