Review Notes

Index redacted lab artifacts — sessions lab, SAST, DAST, deps, gitleaks evidence.

Review Notes• Audio Walkthrough

00:00/02:28

Visual · t17_review_notes

Review notes = table of contents for YOUR secure coding work. Original Cyberlium.

Reviewers trust indexed evidence — not a folder called final_secrets_v3.

Build review index listing capstone artifacts: path, date, one-line description, redaction note. Include sessions/CSRF lab, SAST triage output, CI workflow snippet, DAST baseline summary, dependency audit fix, gitleaks clean scan, rotation runbook. All from $REPO/$LAB_URL — no employer tickets, no classmate scan dumps, no production screenshots without authorization. chmod 600 index.

1. Index fields

Artifact name, module lesson, file path, UTC date, description, redactions applied.

Cross-link checklist row to index row.

Command guide

Try these commands — Index fields

═══ LINUX / BASH (Network & Reconnaissance Audit) ═══

Scan target host for open ports and service version signatures

Command — copy this

nmap -sS -sV -p 80,443,8080 -Pn ${LAB_HOST:-127.0.0.1}

DNS and WHOIS reconnaissance on authorized domain

Command — copy this

dig +short A target.local
dig +short MX target.local
whois target.local 2>/dev/null | grep -iE "(Registrar|Creation Date|Name Server)" | head -6

Inspect HTTP headers for technology stack fingerprinting

Command — copy this

curl -s -I "http://${LAB_HOST:-127.0.0.1}:8080" | grep -iE "(Server|X-Powered-By|Set-Cookie|Content-Security-Policy)"

Primary tools to practice this lesson: grep, python3. Reference sites: Code review guide (https://owasp.org/www-project-code-review-guide/); CWE Top 25 (https://cwe.mitre.org/top25/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.