Lab — Capstone

Execute checklist on $PROGRAM or $LAB_BOUNTY path — evidence complete, pack sealed, teardown.

Lab — Capstone• Audio Walkthrough

00:00/02:49

Visual · t20_capstone_lab

Capstone: checklist × bounty evidence. Original Cyberlium.

Close the loop on hunting you did ethically — then secure notes and revoke test tokens.

Walk Topic 20 checklist on YOUR enrolled $PROGRAM path or $LAB_BOUNTY: verify scope on file, asset map current, class and validation labs linked, report draft complete, triage lab threads professional, evidence pack indexed, integrity statement signed. Update index. Teardown: revoke disposable test tokens/accounts per program rules, chmod 600 all artifacts, delete local proof copies with live cookies if no longer needed. No stranger scans, no weaponized cookbook export, no harassment in any saved thread. Defender paragraph: how YOUR reported bug class would be detected and fixed on a mature program team.

1. Execute checklist

Check each row; link artifact or N/A with reason.

Confirm no OOS or unenrolled targets in any file.

Command guide

Try these commands — Execute checklist

═══ LINUX / macOS (Web & API Security Testing) ═══

Test HTTP methods on authorized lab endpoint

Command — copy this

for method in GET POST PUT DELETE OPTIONS; do
  curl -s -o /dev/null -w "%-8s -> Status: %{http_code}
" -X $method "http://${LAB_HOST:-127.0.0.1}/api/v1/user"
done

Test JSON API with Authorization Bearer header

Command — copy this

curl -s -X POST "http://${LAB_HOST:-127.0.0.1}/api/v1/profile" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <TEST_TOKEN>" \
  -d '{"id": 1, "action": "view"}' | jq . 2>/dev/null || cat

Check for CORS misconfiguration headers

Command — copy this

curl -s -I -H "Origin: https://attacker.com" "http://${LAB_HOST:-127.0.0.1}/api/v1/status" | grep -i "Access-Control"

Primary tools to practice this lesson: curl, subfinder, httpx. Reference sites: Bug bounty capstone; Subfinder (https://github.com/projectdiscovery/subfinder); Httpx (https://github.com/projectdiscovery/httpx). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.