Security Labs

Problem

Real-world security skill grows in labs, not in slide decks. Most learning paths skip the part where you actually break things safely.

Solution

A personal lab series — controlled targets covering OWASP Top 10 categories, written up as walkthroughs with the fix alongside the finding.

Approach

Each lab is a reproducible Docker container shipping the vulnerable app + the fixed app side-by-side. Findings are written for two audiences in one document: the offensive read-out for security folks, and the remediation diff for engineers who need to ship the fix Monday morning.

Stack

Features

• OWASP Top 10 coverage
• Responsible disclosure write-ups
• Reproducible Docker labs
• Defensive remediation guides

What landed in production

• Reproducible Docker labs (no "works on my machine")
• Dual-audience write-ups: offense + remediation
• Coordinated disclosure of real-world findings