Secure › Module 5 › Lesson 4
Auth Storage Lab
Auth storage pack on $MY_REPO — safe errors, bcrypt/Argon2, plaintext audit.
Visual · auth_storage_lab
Lab: auth storage pack. $MY_REPO only. Original Cyberlium.
Opening
Generic errors, hashed passwords, clean git — one repo, zero crack kits.
Module 5 lessons covered safe errors, password hashing, and never plaintext. This lab ships combined evidence from $MY_REPO: error handler note, hash implementation, secret audit — local test users only. No hashcat on dumps. No OAuth phish. Next: Quiz — Errors and Auth Storage.
1. Lab contract: assemble auth artifacts
Merge lessons 5-1 through 5-3 into one note file. Verify signup/login hash flow on localhost $TOY_APP.
Confirm no plaintext secrets remain in tracked files.
Command guide
Try these commands — Lab contract: assemble auth artifacts
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Auth storage — https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html Session management — https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install openssl
macOS: Built-in
Windows:
Command — copy this
choco install openssl
═══ LINUX / macOS ═══
Command — copy this
cat > "$HOME/cyberlium-lab/t17-auth-storage.txt" <<'EOF' password: argon2id/bcrypt via library errors: generic to client; details to logs never: plaintext password columns EOF
Command — copy this
grep never "$HOME/cyberlium-lab/t17-auth-storage.txt" openssl dgst -sha256 "$HOME/cyberlium-lab/t17-auth-storage.txt"
Primary tools to practice this lesson: grep, openssl. Reference sites: Auth storage (https://cheatsheetseries.owasp.org/cheatsheets/Authentication_Cheat_Sheet.html); Session management (https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Forbidden
hashcat/John on breach dumps, OAuth phish pages, publishing verbose errors from stranger APIs, committing.env with real keys.
Module 6 covers OAuth roles safely — never fake login pages aimed at classmates or strangers in this lab.
3. Close
chmod 600. Quiz next — then Sessions and OAuth Literacy.
Generic errors, adaptive hashes, and clean git history on $MY_REPO are the auth storage proof.
4. What you ship: auth storage pack for $MY_REPO
Safe errors, bcrypt/Argon2 hash flow, plaintext audit. Local users only. chmod 600.
5. What you record before the next lesson
Date. Auth storage pack on $MY_REPO. File t17-m05-l04-auth-storage-lab.txt chmod 600.
6. Wrong vs right: stranger apps vs YOUR repo
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include hashcat output from leak file. Skip.env gitignore.
Right
Auth storage pack on $MY_REPO. Next: Quiz — Errors and Auth Storage.
Mission: auth storage evidence pack
1) Verify $MY_REPO. 2) Merge error, hash, audit sections. 3) Localhost signup/login test. 4) chmod 600. Never crack stranger dumps.
Stuck? Ask Cyberlium AI Mentor
One local test user with verified hash beats any crack-kit trophy.
Knowledge Check
APPLY: Auth Storage Lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: bcrypt/Argon2 verify flow should be tested locally on $TOY_APP.
True or False
Knowledge Check
APPLY: Stranger.env leak in chat:
Multiple choice