Posts

Showing posts from June, 2025

Ethical Hacking Lab Project

Image
Hacking Lab- Financial Security Exploitation: June 19, 2025      Overview  The goal of the project is to identify and exploit typical security flaws inside a business network. This project simulates a monitored data breach setting on an unreal financial company, Binary Assets. This project is designed to provide practical experience in ethical hacking focusing on educational and cybersecurity practices which includes ethical hacking, evaluating vulnerabilities and network security.   Team Members   1. Tanguy Krzepisz   2. Aakriti Neupane   Lab Setup   In this project, we created cyber atmosphere on VirtualBox to simulate an actual computer network. We are taking Kali Linux to perform major attack and follow systematic plan to get control to various network using identified vulnerabilities.   Stages of Attack  1 . First Access – Using VSFTPD vulnerability  Target: Honeypot Linux server – 192.168.60.250...

Analysis of Web Vulnerabilities using Burp Suite

Image
  Analysis of Web Vulnerabilities - June 19,2025 1. Introduction Brief overview of web app vulnerabilities & their impact on security. 2. Goal of the Project ✔ Understand & identify common web vulnerabilities ✔ Use ethical testing tools like Burp Suite ✔ Learn OWASP Top 10 concepts through hands-on labs 3. OWASP Top 10 – Key Concepts Injection (e.g., SQLi) Cross-Site Scripting (XSS) Information Disclosure Broken Access Control Security Misconfigurations 4. Tools Used – Burp Suite Intercepts, modifies, and analyzes HTTP/S traffic Used to test input validation and identify bugs 5. Ports Wigger Labs – Hands-On Practice ✅ Lab 1 : Reflected XSS ✅ Lab 1 : Reflected XSS into HTML context with nothing encoded. ✅ Lab 2 : SQL Injection in WHERE clause – Extract hidden data ✅ Lab 3 : Information Disclosure via error messages Whether you are new or wants hands on experience, this is beginner friendly and guide you through each step: Click Below Link...