Hands-on

Labs

Guided, reproducible exercises built on the articles on this site. Each lab is a bounded practice task with a narrow objective, a safe environment, and a verification step — not a tool dump.

Burp Suite recon workflow

Stand up an isolated practice target, point Burp at your own browser profile, and keep scope, speed, and evidence under control from the first request.

Beginner~45 min

API authorization test matrix

Turn a list of API endpoints into an identity-by-endpoint matrix, then test object-level (IDOR/BOLA) and function-level (BFLA) authorization with more than one session.

Intermediate~60 min

Reflected XSS and NoSQL injection lab

Work the same input through an HTML context and a database query context, and see why “the payload fired” is not the same as “the finding is real.”

Beginner~50 min

Next.js authorization boundary

Move the authorization check inside the Server Action, separate link-only pages from truly private content, and prove the difference with a direct call instead of trusting the UI.

Intermediate~60 min

Deny-log detection and triage

Design an authorization event schema (actor, tenant, object, action, decision), then turn a burst of denials into an alert you confirm with one follow-up request.

Intermediate~50 min

Android app security baseline

Walk an app you own or are authorized to test through the Android surface: exported components, data storage and Keystore, WebView, and integrity checks — on an isolated device or emulator.

Advanced~90 min