You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Assignment: Completing and Analyzing PortSwigger Web Security Labs
1
+
# Assignment: Comprehensive Web Security Lab Challenge
2
2
3
3
## Objective
4
4
5
-
The purpose of this assignment is to hone your hands-on skills in web security by engaging with real-world simulations. You will complete two labs from each category at PortSwigger's Web Security Academy and draft comprehensive write-ups detailing your findings, approaches, and solutions.
5
+
The purpose of this assignment is to hone your hands-on skills in web security by engaging with real-world simulations. You will complete a series of labs from PortSwigger's Web Security Academy across multiple difficulty levels and categories, and draft comprehensive write-ups detailing your findings, approaches, and solutions. This assignment simulates real-world penetration testing scenarios and prepares you for professional security assessments.
6
6
7
7
## Instructions
8
8
9
9
### 1. **Selection of Labs:**
10
10
11
11
- Visit [PortSwigger's Web Security Academy](https://portswigger.net/web-security/all-labs).
12
-
- From the list of categories, select at least two labs ("PRACTITIONER" or higher) from five categories that you find intriguing or challenging. (10 Labs total)
13
-
- Begin each lab by thoroughly reading the provided instructions and understanding the objectives.
12
+
- Complete **10 total labs** with the following requirements:
13
+
- At least **10 PRACTITIONER level** (or higher)
14
+
- You must complete labs from **at least 5 different categories**.
15
+
- Begin each lab by thoroughly reading the provided instructions and understanding the objectives
14
16
15
17
### 2. **Lab Completion:**
16
18
@@ -20,27 +22,59 @@ The purpose of this assignment is to hone your hands-on skills in web security b
20
22
21
23
### 3. **Write-up Compilation:**
22
24
23
-
- For each lab you've completed, create a detailed write-up.
24
-
-**Introduction:** Briefly describe the lab and its main objectives.
25
-
-**Approach:** Detail the steps and methods you used to exploit the vulnerabilities.
26
-
-**Challenges Faced:** Discuss any hurdles or difficulties you encountered and how you overcame them.
27
-
-**Conclusion:** Summarize the key learnings from the lab and any additional insights you gained.
28
-
- Ensure each write-up is clear, organized, and demonstrates your understanding of the lab's content.
25
+
For each lab you've completed, create a detailed write-up with the following structure:
26
+
27
+
**Required Sections:**
28
+
29
+
-**Introduction:** Briefly describe the lab, its difficulty level, category, and main objectives
30
+
-**Vulnerability Analysis:** Explain what vulnerability exists and why it's exploitable
31
+
-**Approach:** Detail the step-by-step process you used to exploit the vulnerability
32
+
-**Challenges Faced:** Discuss any hurdles or difficulties you encountered and how you overcame them
33
+
-**Impact Assessment:** What could an attacker achieve with this vulnerability in a real-world scenario?
34
+
-**Remediation:** How should this vulnerability be fixed? Provide specific recommendations
35
+
-**Conclusion:** Summarize the key learnings from the lab and any additional insights you gained
36
+
37
+
**Additional Requirements:**
38
+
39
+
- Include screenshots showing successful exploitation (flag capture or solved confirmation)
40
+
- Document the exact payloads or requests you used
41
+
- Reference relevant OWASP categories where applicable
42
+
- Ensure each write-up is clear, organized, and demonstrates your understanding of the lab's content
29
43
30
44
### 4. **Submission:**
31
45
32
46
- Combine all your write-ups into a single, well-organized document.
33
-
- Your document should have a table of contents, indicating the category and title of each lab.
34
-
- Like any professional report, ensure your document has a cover page with your name, date, and a title that encapsulates the nature of the assignment.
47
+
- Your document should include:
48
+
-**Cover page** with your name, date, and assignment title
49
+
-**Table of contents** with page numbers, organized by category or difficulty
50
+
-**Executive summary** (1 page): Brief overview of labs completed, key skills demonstrated, and overall learning outcomes
51
+
-**Lab write-ups** (main section): All 10 labs with complete documentation as specified above
52
+
-**Reflection** (1-2 pages): Overall lessons learned, which challenges were most valuable, and areas for further study
53
+
-**Appendix**: Complete list of labs with URLs and difficulty levels
54
+
- Organize labs by category or difficulty level (your choice)
55
+
- Expected length: 15-30 pages (quality over quantity)
56
+
57
+
## Submission Requirements
35
58
36
-
##Submission Guidelines
59
+
### Deliverables
37
60
38
-
1.**Lab Write-up Document:**
39
-
- Submit your consolidated lab write-ups as a PDF document on Google Drive.
40
-
- Ensure your name, date, and the title of the assignment are included on the cover page.
41
-
- Ensure your file is named according to the naming convention.
61
+
1.**Comprehensive Lab Report (PDF)**:
62
+
- Professional formatting with cover page and table of contents
-**Document**: PDF format, professional appearance
71
+
-**Code**: Syntax highlighted, properly formatted
72
+
-**Screenshots**: Clear, annotated with explanations
73
+
-**Submission**: Upload to Google Drive per course guidelines
74
+
75
+
---
76
+
77
+
## Evaluation Criteria
44
78
45
79
1.**Lab Completion:**
46
80
@@ -58,45 +92,127 @@ The purpose of this assignment is to hone your hands-on skills in web security b
58
92
- Variety and difficulty of the labs chosen.
59
93
- Thoroughness in exploring and documenting each lab.
60
94
61
-
By undertaking this assignment, you will not only improve your practical skills in web security but also your ability to document and communicate complex processes, which is invaluable in the cybersecurity field.
Earn bonus points by challenging yourself with more advanced labs. This task will demonstrate your ability to tackle higher complexity problems and deepen your practical understanding of web security.
99
+
Earn bonus points by challenging yourself with advanced EXPERT-level labs. This task will demonstrate your ability to tackle higher complexity problems and deepen your practical understanding of web security.
100
+
101
+
### Requirements (up to 10 additional points)
102
+
103
+
Complete **5 additional EXPERT-level labs** from PortSwigger Web Security Academy:
104
+
105
+
- All 5 labs must be rated **EXPERT** difficulty
106
+
- Labs should be from **at least 3 different categories**
107
+
- Provide the same detailed write-ups as the main assignment
108
+
- Include additional analysis of the advanced techniques required
109
+
110
+
### Bonus Submission Guidelines
111
+
112
+
- Include these EXPERT lab write-ups in your report as a separate section titled **"Bonus: EXPERT Lab Challenges"**
113
+
- Follow the same write-up format as your main labs
114
+
- Clearly indicate the difficulty level and category for each bonus lab
115
+
- In your write-ups, specifically address:
116
+
- What made this lab more complex than PRACTITIONER level?
117
+
- What advanced techniques or tools were required?
118
+
- How does this lab represent real-world attack scenarios?
-**Burp Suite Documentation**: <https://portswigger.net/burp/documentation>
78
203
79
-
3.**Enhanced Write-up:**
80
-
- Provide detailed write-ups for each additional lab completed.
81
-
- Follow the same format as your previous write-ups:
82
-
-**Introduction:** Brief overview of the lab's objectives and challenges.
83
-
-**Approach:** Detailed description of your approach to solving the lab.
84
-
-**Challenges Faced:** Discuss any additional challenges faced due to the higher difficulty and how you overcame them.
85
-
-**Conclusion:** Reflect on what you learned from completing these more advanced labs.
204
+
**Tools:**
86
205
87
-
### Additional Submission Guidelines for Bonus Points
206
+
- Burp Suite Community (essential)
207
+
- Browser Developer Tools
208
+
- Text editor for payload crafting
88
209
89
-
- Include these advanced lab write-ups in your report as an additional section or append them to the respective categories.
90
-
- Clearly mark these sections as "Bonus Points Task: Advanced Lab Completion" for easy identification.
210
+
---
91
211
92
-
### Evaluation Criteria for Bonus Points
212
+
##Deadline
93
213
94
-
1.**Lab Completion and Complexity:**
95
-
- Successful completion of higher-difficulty labs.
96
-
- Understanding and application of advanced techniques.
214
+
Refer to the course schedule for the specific deadline. **Late submissions will be penalized according to course policy.**
97
215
98
-
2.**Depth and Quality of Write-ups:**
99
-
- Clarity, detail, and technical accuracy in the write-ups.
100
-
- Insightfulness in the reflection of challenges and learnings.
216
+
---
101
217
102
-
Completing these advanced labs will not only earn you bonus points but also significantly enhance your skill set in web security, preparing you for more complex and real-world scenarios.
218
+
By undertaking this assignment, you will not only improve your practical skills in web security but also your ability to document and communicate complex processes, which is invaluable in the cybersecurity field. This comprehensive challenge prepares you for real-world penetration testing and bug bounty hunting.
0 commit comments