Vulnerable lab
environment.

These labs keep practical security work separate from production systems. Each environment is intentionally vulnerable, isolated, and used to practice discovery, exploitation, documentation, and remediation in a controlled setting.

Upstream projects are forked to my GitHub account so the material remains available for future study and can be revisited as my approach and tooling evolve.

• API discovery, authentication, authorization, and input validation.
• Prompt injection and application-layer LLM security.
• Smart-contract and decentralized-finance vulnerabilities.
• AWS and Azure misconfiguration and cloud attack paths.
• Repeatable lab setup, evidence collection, and remediation notes.