Learn and exploit common OWASP vulnerabilities in a safe environment

Business Scenario

Welcome! SecureMart is a fictional online shopping application with login, user accounts, product pages, and customer feedback features. During a controlled security assessment, students act as junior penetration testers to identify weaknesses in authentication, SQL Injection, XSS, cookies, and session management, and determine whether authentication can be bypassed. Testing must be performed only against the intentionally vulnerable lab application.

Pre-Lab Preparation

Topic :  Web Application Security Fundamentals

1) Introduction to Web Application Security

2) Overview of OWASP Top 10 vulnerabilities

Task 1: Identify common web vulnerabilities in a controlled lab.

Action: Review the core goals for the SQL Injection (intro) module.

a

Next Step: Click page 2 on the navigation bar.

b

Lesson Overview

1

Action: Review the basic definition of SQL and examine the employees table structure.

a

Next Step: Scroll down to view the query prompt.

b

SQL Concepts & Data Table

1

Action:  Read the task requirement: retrieve the department for the employee Bob Franco.

a

Next Step: Type the SQL command into the input box:

b

Query Prompt (Bob Franco)

1

SQL

c

select department from employees where last_name='Franco'

Action: Enter select department from employees where last_name='Franco' into the SQL query field.

a

Entering the Retrieval Query

1

Action: Enter select department from employees where last_name='Franco' into the SQL query field.

a

Next Step: Click Submit.

b

Successful Retrieval Output

1

Action: Verify the success message and output (DEPARTMENT: Marketing).

a

Next Step: Click page 3 on the navigation bar.

b

Task 1: Understanding BRD

Before you start building anything, you need to clearly understand what the client actually wants.So, let’s begin by understanding the BRD (Business Requirement Document) shared by the client.

BRD Full Form is Business Requirement Details.BRD like a plan for building a house. This plan helps the builder understand what to build.In the same way,BRD tells developers what the client wants to build

Click to download BRD : BiteBox_BRD.pdf

Activity

After going through BRD list down the Core Features and  Web Pages in the tabulated Format as shown Below.

Col 1Col 2Col 3
Row 1
Row 2
Row 3

Formula

Profit = Revenue - Cost

Task 2: Create WireFrame

Now that you understand the requirements, don’t jump into coding yet. Before development, we always visualize the layout.

Now lets  create a simple wireframe for the homepage.

A wireframe is like a layout plan of a house. Before building, you decide where rooms, doors, and windows will be placed.Similarly, a wireframe helps you plan where elements like headers, images, and buttons will appear on a webpage—before adding design or colours.

Task 3: Code Editor Installation

Good work on completing the planning phase.

Now we will start development. Before that, make sure your system is ready with the required tools.

In this step we will install the VS code editor that will help to Write code efficiently,Organize files , Run and test your application

Go to the visual studio code official website  

1

Click to download Homepage Wireframe : Homepage Wireframe

Link - https://code.visualstudio.com/download

Link - https://github.com/volatilityfoundation/volatility3

Choose your operating system(windows / Mac) and download the installation file.

Double click on the download app and Accept the agreement and click next

2

It is a long established fact that a reader will be distracted

b

Sub Steps

a

 Double click on the download app and Accept the agreement and click next 

public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}
public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}

public class MathSample {
    public static void main(String[] args) {
        int x = 10;
        int y = 20;
        int sum = x + y;
        
        System.out.println("The sum is: " + sum);
    }
}

 

Great job!
You have successfully completed your first lab on BiteBox Project Onboarding.

In this lab, you have: Understood the BRD, Created a wireframe, Set up your development environment, Organised your project structure, Run your first program

You are now ready to move to the next stage of development

Checkpoint

Next-Lab Preparation

   Git Push

git push origin branchName

Topic : Working with a Text and Listin HTML

1) Power of HTML text tags
2) Customizing your style with CSS
3) Listing it right using HTML
4) HTML Link up , attributes of tag, block vs inline elements

Text box Width : 887
Business Scenario, Pre-lab Preparation, Next-lab Preparation, Task, Activity, Checkpoint : 90%.
Steps : 1,2,3 [Sub Steps - a,b,c]
Normal Text, Topic Name : 80%
Subtopic : 70%
Code Box font Size : 16px