Lab 01: Security Concepts & Web Prerequisites
Threat actor taxonomies, target visibility, 5 testing phases, network layers, TCP handshake, HTTP anatomy, and browser DevTools interception.
Welcome to the centralized laboratory platform for CCY4202. Replace static PDF manuals with interactive terminal workflows, step-by-step exploit analysis, live quizzes, and classroom-optimized projection.
root@kali-lab:~# ./verify_lab_environment.sh
Interactive hands-on offensive security laboratory assignments.
Threat actor taxonomies, target visibility, 5 testing phases, network layers, TCP handshake, HTTP anatomy, and browser DevTools interception.
Recon and map OWASP Juice Shop, keep a findings log, then intercept, tamper, and repeat its HTTP traffic. Learn Burp Proxy, Repeater, scope, and the "three ways" principle across DevTools / Burp / curl.
Bypass a login with no password, make the app leak its own query, then pull the whole user table out through the search bar with UNION. Then meet blind SQLi and sqlmap, and write the finding. Built from zero SQL.
All students enrolled in CCY4202 must abide by strict university academic integrity guidelines and international cyber legislation. Performing port scans, vulnerability probes, or exploitation against IP addresses, servers, or wireless networks outside your assigned 192.168.56.0/24 host-only virtual subnet is strictly prohibited and constitutes a criminal offense.