Hands-on Labs
Web Security Lab — Fundamentals
Explore web security fundamentals in a real environment: SQL injection, XSS, CSRF and vulnerable configurations. Ideal for beginner developers and SOC analysts.
Duration
3h
Level
Beginner
Category
Hands-on Labs
Prerequisites
Basic web development knowledge (HTML, HTTP) and Linux terminal navigation.
What you will learn
- Identify and exploit the 10 most common OWASP vulnerabilities
- Understand SQL injection mechanics and how to prevent them
- Detect and remediate XSS flaws in a web application
- Implement CSRF protections and HTTP security headers
- Analyze a vulnerable web application using standard tools (Burp Suite)
Program
Introduction to web vulnerabilities
Overview of the most common web attacks, lab environment presentation and tools walkthrough.
SQL Injections
Manual and automated SQL injection exploitation, data extraction, authentication bypass.
Cross-Site Scripting (XSS)
Reflected, stored and DOM-based XSS: exploitation, session cookie theft, Content-Security-Policy protection.
CSRF and session management
Cross-Site Request Forgery attacks, session hijacking, anti-CSRF token implementation.
Misconfigurations and exposure
Directory listing, exposed sensitive files, server misconfiguration and insecure HTTP methods.
Who is this for?
Why on CyberAct?
This lab runs on a real isolated virtual machine, no simulation involved: every exploit you launch has a real effect on the target environment. CyberAct's AI generates scenario variants each session, to prevent rote memorization and force real understanding.
Related content
Ready to train your teams?
Access the full CyberAct catalog on your dedicated platform.