Practical cybersecurity guides, labs & compliance
Review file uploads as separate request, acceptance, processing, storage and retrieval observations. Preserve a baseline and one permitted change, and use the lifecycle record to avoid inferring execution from an HTTP success response.
Review Kioptrix Level 4 SQLi with a baseline request, one controlled change and separately observed application access. Use the working note to distinguish query interpretation, authenticated outcomes and remediation that has actually been verified.
Review a Burp external-browser setup through the active profile, proxy listener and matching CA. Use a harmless approved request to confirm the path and record trust cleanup and the limits of profile separation.