From 888a19cfafcbc5b55b4e6b58db3ea50fdc2bcb2a Mon Sep 17 00:00:00 2001 From: Rashid Badamshin Date: Sun, 8 Feb 2026 17:17:38 +0300 Subject: [PATCH 1/6] add template --- labs/.github/pull_request_template.md | 23 +++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 labs/.github/pull_request_template.md diff --git a/labs/.github/pull_request_template.md b/labs/.github/pull_request_template.md new file mode 100644 index 00000000..b096b147 --- /dev/null +++ b/labs/.github/pull_request_template.md @@ -0,0 +1,23 @@ +## Goal + + + +## Changes + + + +## Testing + + + +## Artifacts & Screenshots + + + +--- + +### Checklist + +- [ ] Clear, descriptive title +- [ ] Documentation updated if needed +- [ ] No secrets or large temp files committed From 81b28c3669fa3e1ac5a2c5628a2bfcba8824e81c Mon Sep 17 00:00:00 2001 From: Rashid Badamshin Date: Sun, 8 Feb 2026 17:20:47 +0300 Subject: [PATCH 2/6] docs: add lab1 submission --- labs/submission1.md | 118 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 118 insertions(+) create mode 100644 labs/submission1.md diff --git a/labs/submission1.md b/labs/submission1.md new file mode 100644 index 00000000..03c9a2e4 --- /dev/null +++ b/labs/submission1.md @@ -0,0 +1,118 @@ +# Triage Report — OWASP Juice Shop + +> **Before submitting:** Run these commands, then paste outputs and complete checkboxes below: +> 1. `docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v19.0.0` +> 2. Browse to http://localhost:3000 and take a screenshot → save as `labs/screenshots/juice-shop-home.png` +> 3. `curl -s http://127.0.0.1:3000/rest/products | head` → paste output in Health Check +> 4. `curl -I http://127.0.0.1:3000` → check for CSP/HSTS in Surface Snapshot + +## Scope & Asset + +- Asset: OWASP Juice Shop (local lab instance) +- Image: bkimminich/juice-shop:v19.0.0 +- Release link/date: [v19.0.0 Release](https://github.com/juice-shop/juice-shop/releases/tag/v19.0.0) — 2025-09-04 +- Image digest: sha256:37cc73163c4c269c044e890fee868d62637109cad126a26dab13dc442ef2ae76 + +## Environment + +- Host OS: Linux 6.8.0-58-generic +- Docker: 26.1.3, build 26.1.3-0ubuntu1~24.04.1 + +## Deployment Details + +- Run command used: `docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v19.0.0` +- Access URL: http://127.0.0.1:3000 +- Network exposure: 127.0.0.1 only [x] Yes [ ] No _(bound to localhost only)_ + +## Health Check + +- Page load: + - **Screenshot path:** `labs/screenshots/juice-shop-home.png` _ +- API check: Output from `curl -s http://127.0.0.1:3000/rest/products | head`: + +``` + + + + Error: Unexpected path: /rest/products +