Skip to content

SUMMARY.md

Latest commit

 

History

History
24 lines (20 loc) · 1.81 KB

SUMMARY.md

File metadata and controls

24 lines (20 loc) · 1.81 KB
Raw

Pentest Lab — One-Page Summary

Context: Recon (Nmap) and DAST (OWASP ZAP baseline + full scan) against a controlled OWASP Juice Shop target, correlated in the Suricata-based SOC lab (Suricata → Filebeat → Elasticsearch → Kibana). Built for a SOC/Pentest Jr portfolio.

Pipeline express

  1. docker compose up -d (or reuse the Juice Shop container from the SOC lab).
  2. bash scripts/nmap_scan.sh → reports/nmap_juice.txt (MITRE T1595/T1046).
  3. bash scripts/zap_baseline.sh → reports/zap_baseline.html (10 WARN Medium/Low).
  4. bash scripts/zap_full_scan.sh → reports/zap_fullscan.{html,md,json} (5 Medium, 5 Low, 5 Info).
  5. bash scripts/generate_evidence.sh → PNGs annotated with the highcontrast_text_panel_v1 preset.
  6. Kibana Discover (filebeat-*) shows ET SCAN Nmap TCP Scan (sid:2001219) (screenshots/kibana_suricata_portscan_20251109T083126Z.png).
  7. bash scripts/notify_suricata_alerts.sh → text summary in reports/alert_notifications/ (optional Slack webhook).

Evidências principais

  1. screenshots/00_zap_summary_20251109T083126Z.png — ZAP baseline summary (Medium/Low alerts).
  2. screenshots/03_zap_full_summary_20251109T083126Z.png — ZAP full scan summary (Backup files, CORS, 403 bypass).
  3. screenshots/04_zap_backup_files_20251109T083126Z.png — exposed backup artefacts under /ftp/*.
  4. screenshots/kibana_suricata_portscan_20251109T083126Z.png — Suricata alert correlated to Recon.

Insights & backlog

  • Harden response headers (CSP, SRI, strict CORS) and remove legacy backup artefacts.
  • Update docker-compose.yml with security_opt: no-new-privileges and read_only: true (Semgrep finding).
  • Automate SOC response to Suricata alerts (Slack webhook / TheHive workflow).
  • Extend to authenticated zap-full-scan.py and CI automation for Recon/DAST.