A custom enterprise-style penetration testing lab built for hands-on cybersecurity practice.
This environment simulates a realistic internal infrastructure with multiple vulnerable web applications hosted across 11 virtual hosts.
This lab was designed to improve practical penetration testing skills including:
- Reconnaissance and enumeration
- Web application testing
- Exploitation of common vulnerabilities
- Privilege escalation concepts
- Reporting and remediation workflow
- 11 domain-based virtual hosts
- Apache / Nginx web services
- Linux-based environment
- Custom DNS / hosts file routing
- Realistic business-style structure
- SQL Injection
- Cross-Site Scripting (XSS)
- IDOR
- Authentication flaws
- File Upload issues
- Misconfigurations
- Information Disclosure
- Kali Linux
- Burp Suite
- Nmap
- Gobuster
- Dirsearch
- SQLMap
- Bash
- Python
- Web Application Penetration Testing
- Enumeration
- Vulnerability Validation
- Manual Testing
- Basic Automation
- Security Mindset
Built as a personal project to strengthen real-world penetration testing experience and simulate enterprise attack surfaces.
Doniyor Sotiboldiyev Junior Penetration Tester
