Bug › Module 10 › Lesson 4
Lab — Capstone
Execute checklist on $PROGRAM or $LAB_BOUNTY path — evidence complete, pack sealed, teardown.
Visual · t20_capstone_lab
Capstone: checklist × bounty evidence. Original Cyberlium.
Opening
Close the loop on hunting you did ethically — then secure notes and revoke test tokens.
Walk Topic 20 checklist on YOUR enrolled $PROGRAM path or $LAB_BOUNTY: verify scope on file, asset map current, class and validation labs linked, report draft complete, triage lab threads professional, evidence pack indexed, integrity statement signed. Update index. Teardown: revoke disposable test tokens/accounts per program rules, chmod 600 all artifacts, delete local proof copies with live cookies if no longer needed. No stranger scans, no weaponized cookbook export, no harassment in any saved thread. Defender paragraph: how YOUR reported bug class would be detected and fixed on a mature program team.
1. Execute checklist
Check each row; link artifact or N/A with reason.
Confirm no OOS or unenrolled targets in any file.
Command guide
Try these commands — Execute checklist
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Bug bounty capstone — YOUR joined program / lab only Subfinder — https://github.com/projectdiscovery/subfinder Httpx — https://github.com/projectdiscovery/httpx
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install curl go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
macOS:
Command — copy this
brew install subfinder brew install httpx
Windows: Built-in (PowerShell: Invoke-WebRequest)
Command — copy this
go install -v github.com/projectdiscovery/subfinder/v2/cmd/subfinder@latest go install -v github.com/projectdiscovery/httpx/cmd/httpx@latest
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t20-scope.env" ls -la "$HOME/cyberlium-lab"/t20-*.txt "$HOME/cyberlium-lab"/t20-*.env 2>/dev/null subfinder -d "$(cat "$HOME/cyberlium-lab/t20-root-domain.txt" 2>/dev/null || echo httpbin.org)" -silent 2>/dev/null | head -10 || true httpx -u "https://$SCOPE_HOST" -status-code -title -silent 2>/dev/null | head -5 || curl -sS -I "https://$SCOPE_HOST" 2>/dev/null | head -10 curl -sS "https://$SCOPE_HOST/robots.txt" 2>/dev/null | head -8 || curl -sS https://httpbin.org/robots.txt | head -8 grep -E 'title|asset|never' "$HOME/cyberlium-lab/t20-report-draft.txt" "$HOME/cyberlium-lab/t20-rules.txt" 2>/dev/null | head -8
Primary tools to practice this lesson: curl, subfinder, httpx. Reference sites: Bug bounty capstone; Subfinder (https://github.com/projectdiscovery/subfinder); Httpx (https://github.com/projectdiscovery/httpx). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Defender paragraph
One paragraph: class → validation → fix → detection for YOUR capstone finding.
Name what breaks if you skip minimal proof or test strangers.
3. Shutdown
Revoke test creds. Sign completion in index. Secure pack.
Optional: thank-you note template for triage if live submit occurred.
4. What you ship: capstone evidence pack complete
Checked checklist + sealed evidence pack + teardown proof.
5. What you record before the next lesson
Capstone pack path. Scope quiet.
6. Wrong vs right: random sites vs in-scope program
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Capstone evidence from mass unenrolled scanning campaign.
Right
Capstone complete on enrolled path. Next: topic quiz.
Mission: Topic 20 capstone
1) Walk checklist with evidence links. 2) Defender paragraph from your finding. 3) Full teardown documented.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum N/A documentation?”
Knowledge Check
APPLY: Capstone target:
Multiple choice
Knowledge Check
APPLY: True or False: Stranger mass scan capstone is credit.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice