Secure › Module 10 › Lesson 1
Checklist
One-page Topic 17 capstone checklist — validation, auth, sessions, SAST, DAST, secrets.
Visual · t17_capstone_checklist
Checklist consolidates secure coding pillars. Original Cyberlium.
Opening
Capstone is proving discipline in YOUR repo — not auditing the internet's dependencies.
Assemble checklist covering Modules 1–9: secure coding RoE and $REPO scope, SDLC/threat literacy, input validation and encoding, safe errors and password storage, session/CSRF/OAuth refusal list, SAST triage and CI gate, DAST lab-only RoE and dependency audit, secret shapes and gitleaks rotation. Use on capstone walk of $REPO and $LAB_URL only — never scan, DAST, or leak-hunt stranger production.
1. Scope and RoE
$REPO and $LAB_URL named. NEVER stranger apps, OAuth phishing, unauthorized DAST.
Notes under $HOME/cyberlium-lab chmod 600.
Command guide
Try these commands — Scope and RoE
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
OWASP ASVS — https://owasp.org/www-project-application-security-verification-standard/ Cheat Sheet Series — https://cheatsheetseries.owasp.org/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install openssl
macOS: Built-in
Windows:
Command — copy this
choco install openssl
═══ LINUX / macOS ═══
Command — copy this
cat > "$HOME/cyberlium-lab/t17-capstone-checklist.txt" <<'EOF' sdlc: notes exist validation: allowlist demo done encoding: html.escape done secrets: gitleaks clean scope: 127.0.0.1 toy only EOF
Command — copy this
grep -c . "$HOME/cyberlium-lab/t17-capstone-checklist.txt" openssl dgst -sha256 "$HOME/cyberlium-lab/t17-capstone-checklist.txt"
Primary tools to practice this lesson: grep, openssl. Reference sites: OWASP ASVS (https://owasp.org/www-project-application-security-verification-standard/); Cheat Sheet Series (https://cheatsheetseries.owasp.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Code pillars
Validation, encoding, auth storage, sessions, CSRF, SAST CI, DAST baseline, deps, gitleaks.
Each item links to artifact or honest N/A with reason.
3. Pipeline habit
Pre-commit or CI runs SAST + gitleaks; deps audit on schedule.
Teardown: revoke lab OAuth apps, remove synthetic secrets, secure notes.
4. What you ship: Topic 17 capstone checklist
One-page secure coding checklist for $REPO and $LAB_URL.
5. What you record before the next lesson
Checklist file path.
6. Wrong vs right: stranger apps vs YOUR repo
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Use checklist to justify DAST on classmate deploy.
Right
Checklist written. Next: review notes.
Mission: write secure coding checklist
1) RoE/scope section. 2) Code and pipeline pillars. 3) Teardown and refusal section.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Top five capstone items?”
Knowledge Check
APPLY: Checklist includes:
Multiple choice
Knowledge Check
APPLY: True or False: Checklist authorizes stranger prod scans.
True or False
Knowledge Check
APPLY: Teardown includes:
Multiple choice