Web App Pentest Lab
Write-up of testing an intentionally vulnerable web app against the OWASP Top 10.
- Burp Suite
- OWASP ZAP
- OWASP Top 10
- Type
- Lab
- Year
- 2026
- Status
- Draft (placeholder)
Loading
Hello
Available for workFunctional Consultant who maps business processes in Odoo, and a cybersecurity student learning to secure the systems they run on.
Currently atPT SISI
Based in Bogor, Indonesia
--:--:--
Photo coming soon
What I do
Selected work
Labs, write-ups and business case studies. Every entry below is a placeholder for now.
Write-up of testing an intentionally vulnerable web app against the OWASP Top 10.
Host discovery, service enumeration and packet capture analysis in a home lab.
Exploiting a known-vulnerable machine end to end, with remediation notes for each step.
Step-by-step notes from a completed TryHackMe room, covering what worked and what did not.
Case study on mapping a sales process into Odoo, from requirements through user acceptance testing.
Reviewing who can see and change what in an Odoo setup, and documenting the gaps.
Timeline
Where I work and where I am learning.
Works with clients to turn business requirements into Odoo configuration, and supports testing and rollout.
20XX - Present
Full-time
Learning offensive and defensive security fundamentals through hands-on labs.
20XX - Present
Bootcamp
Learning in public
Practice from the past year, one square per day.
Sample data
616
activities in the last year
About me
I am Zamzam, also known as Jajam or 0xjajamm. I work as a functional consultant on Odoo projects at PT SISI, turning how a company works into a system people can use. I am also a student in the Dibimbing cybersecurity bootcamp, learning how systems like these get attacked and how to defend them.
Contact
An Odoo setup to review, a business process to map, or a security question to talk through. It goes to my email.
Placeholder email until the real address is added.