Local web security review
Document a small set of security checks on an intentionally vulnerable local training application.
- Sample inputs
- An isolated training app, synthetic accounts and a written lab scope.
- Your tasks
- Map assets, inspect access boundaries, record a permitted finding and propose a defensive correction.
- What to deliver
- A sanitised report with scope, evidence, impact and retest steps.
- Quality checks
- Keep the app off public networks, use only lab accounts and stop if the test reaches outside scope.
- Interview discussion
- Explain the difference between an observed weakness and a proven impact.