Lab — Capstone

Execute checklist on $PROGRAM or $LAB_BOUNTY path — evidence complete, pack sealed, teardown.

25 min+39 XP3 quiz

Module progress4 of 5

Visual · t20_capstone_lab

Capstone: checklist × bounty evidence. Original Cyberlium.

Opening

Close the loop on hunting you did ethically — then secure notes and revoke test tokens.

Walk Topic 20 checklist on YOUR enrolled $PROGRAM path or $LAB_BOUNTY: verify scope on file, asset map current, class and validation labs linked, report draft complete, triage lab threads professional, evidence pack indexed, integrity statement signed. Update index. Teardown: revoke disposable test tokens/accounts per program rules, chmod 600 all artifacts, delete local proof copies with live cookies if no longer needed. No stranger scans, no weaponized cookbook export, no harassment in any saved thread. Defender paragraph: how YOUR reported bug class would be detected and fixed on a mature program team.

1. Execute checklist

Check each row; link artifact or N/A with reason.

Confirm no OOS or unenrolled targets in any file.

Command guide

Try these commands — Execute checklist

═══ LINUX / macOS (Web & API Security Testing) ═══

Test HTTP methods on authorized lab endpoint

Command — copy this

for method in GET POST PUT DELETE OPTIONS; do
  curl -s -o /dev/null -w "%-8s -> Status: %{http_code}
" -X $method "http://${LAB_HOST:-127.0.0.1}/api/v1/user"
done

Test JSON API with Authorization Bearer header

Command — copy this

curl -s -X POST "http://${LAB_HOST:-127.0.0.1}/api/v1/profile" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <TEST_TOKEN>" \
  -d '{"id": 1, "action": "view"}' | jq . 2>/dev/null || cat

Check for CORS misconfiguration headers

Command — copy this

curl -s -I -H "Origin: https://attacker.com" "http://${LAB_HOST:-127.0.0.1}/api/v1/status" | grep -i "Access-Control"

Primary tools to practice this lesson: curl, subfinder, httpx. Reference sites: Bug bounty capstone; Subfinder (https://github.com/projectdiscovery/subfinder); Httpx (https://github.com/projectdiscovery/httpx). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Defender paragraph

One paragraph: class → validation → fix → detection for YOUR capstone finding.

Name what breaks if you skip minimal proof or test strangers.

3. Shutdown

Revoke test creds. Sign completion in index. Secure pack.

Optional: thank-you note template for triage if live submit occurred.

4. What you ship: capstone evidence pack complete

Checked checklist + sealed evidence pack + teardown proof.

5. What you record before the next lesson

Capstone pack path. Scope quiet.

6. Wrong vs right: random sites vs in-scope program

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong
Capstone evidence from mass unenrolled scanning campaign.
Right
Capstone complete on enrolled path. Next: topic quiz.

Mission: Topic 20 capstone

1) Walk checklist with evidence links. 2) Defender paragraph from your finding. 3) Full teardown documented.

Stuck? Ask Cyberlium AI Mentor

Ask Mentor: “Minimum N/A documentation?”

Knowledge Check

APPLY: Capstone target:

Multiple choice

Knowledge Check

APPLY: True or False: Stranger mass scan capstone is credit.

True or False

Knowledge Check

APPLY: Teardown includes:

Multiple choice

← Previous

Answer all 3 knowledge checks to continue. (0/3 answered)

Guest mode — log in to track XP