Checklist

One-page Topic 17 capstone checklist — validation, auth, sessions, SAST, DAST, secrets.

Checklist• Audio Walkthrough

00:00/02:34

Visual · t17_capstone_checklist

Checklist consolidates secure coding pillars. Original Cyberlium.

Capstone is proving discipline in YOUR repo — not auditing the internet's dependencies.

Assemble checklist covering Modules 1–9: secure coding RoE and $REPO scope, SDLC/threat literacy, input validation and encoding, safe errors and password storage, session/CSRF/OAuth refusal list, SAST triage and CI gate, DAST lab-only RoE and dependency audit, secret shapes and gitleaks rotation. Use on capstone walk of $REPO and $LAB_URL only — never scan, DAST, or leak-hunt stranger production.

1. Scope and RoE

$REPO and $LAB_URL named. NEVER stranger apps, OAuth phishing, unauthorized DAST.

Notes under $HOME/cyberlium-lab chmod 600.

Command guide

Try these commands — Scope and RoE

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

OWASP ASVS — https://owasp.org/www-project-application-security-verification-standard/ Cheat Sheet Series — https://cheatsheetseries.owasp.org/

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install openssl

macOS: Built-in

Windows:

Command — copy this

choco install openssl

═══ LINUX / macOS ═══

Command — copy this

cat > "$HOME/cyberlium-lab/t17-capstone-checklist.txt" <<'EOF'
sdlc: notes exist
validation: allowlist demo done
encoding: html.escape done
secrets: gitleaks clean
scope: 127.0.0.1 toy only
EOF

Command — copy this

grep -c . "$HOME/cyberlium-lab/t17-capstone-checklist.txt"
openssl dgst -sha256 "$HOME/cyberlium-lab/t17-capstone-checklist.txt"

Primary tools to practice this lesson: grep, openssl. Reference sites: OWASP ASVS (https://owasp.org/www-project-application-security-verification-standard/); Cheat Sheet Series (https://cheatsheetseries.owasp.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.