Write-up · PRJ-01
Web App Pentest Lab
Write-up of testing an intentionally vulnerable web app against the OWASP Top 10.
- Type
- Lab
- Year
- 2026
- Tools
- Burp Suite, OWASP ZAP, OWASP Top 10
- Status
- Draft (placeholder)
Sample write-up. The text below is an outline of what will go here, not real findings.
01
Summary
Placeholder: two or three sentences on what was tested, why, and the most important takeaway.
02
Scope and setup
Placeholder: the target (a lab machine or an intentionally vulnerable app), what was in scope, and what was off limits.
Placeholder: the environment used, for example a Kali Linux VM on an isolated network.
03
Recon
Placeholder: how the attack surface was mapped, the commands used, and what stood out.
04
Findings
Placeholder: each issue found, how it was confirmed, and its impact. Add screenshots or trimmed tool output as evidence.
05
Remediation
Placeholder: how each finding could be fixed or mitigated, written for the person who owns the system.
06
What I learned
Placeholder: what was new, what went wrong, and what to try differently next time.