Navigation

Authorised university labs / 2025-2026

Web security labs

Web-security and packet-analysis exercises in authorised teaching environments.

WEB SECURITY LABSAuthorised testing exercises
Lab targetScope and permission
NmapService discovery
DVWA / SQLmapInjection lab
WiresharkPacket analysis

Separate authorised exercises, shown as a learning sequence.

The lab scope

I used deliberately vulnerable lab systems to practise reconnaissance, examine traffic and understand how a vulnerability finding should be explained.

CONTROLLED EXERCISES

Checks I carried out

  • Practised service discovery and HTTP checks in controlled university exercises.
  • Investigated SQL injection in DVWA, using SQLmap as part of a supplied lab scenario.
  • Analysed packet captures with Wireshark and documented observations for coursework.

Making sense of the results

A scanner result isn't the whole finding. I needed to understand what the response meant, how it related to the lab task and what evidence supported it.

ABOUT THE EXAMPLES SHOWN

No real-world targets or unapproved testing are represented here.

guest@tomeh:~

Abdullah Tomeh / cyber security student

Portfolio shell, not a real Linux host. Type help.