Would you voluntarily spend another five hours on this kind of problem? Why?
Cybersecurity · 60–90 min
Investigate one authorized web-security flaw
Experience careful evidence, authorization and remediation—not random attacking.
Start the experiment01 · Setup
What you need
- Basic HTTP; use only the linked deliberately vulnerable lab.
You may stop when the timebox ends. An incomplete result is still useful evidence.
02 · Task
The work sequence
- 01
Read the lab’s authorization and scope before touching anything.
- 02
Complete one beginner SQL injection or XSS lab.
- 03
Write the request, response, impact and safe reproduction steps.
- 04
Explain one server-side fix and one test that prevents regression.
03 · Pay attention
Watch your reaction, not only the output
- Did evidence gathering feel better than tool collecting?
- Could another person reproduce your report safely?
Plot twist
Difficulty does not mean the career is a bad fit. The useful question is whether curiosity returned after the difficulty.
04 · Reflect
Three honest questions
Which part gave you energy, and which part drained it?
What evidence—not a salary video—would you gather before choosing this path?
This site does not save your answers. Put them in your own notebook if useful.
05 · Where to go next