## https://sploitus.com/exploit?id=158D3CEC-7249-58FB-9B4E-1AC8629A16D7
# Personal Cybersecurity Training Repository
> Repository Description: This repository serves as a record of practical training for students majoring in information security at Xiamen Software Technology Institute. It includes full sets of DVWA penetration test exercises, materials related to the implementation of security delivery standards (e.g., Classified Protection 2.0), notes on security operation tools, and compliance-related scripts. ---
## ⚠️ Important Notes
**All content in this repository is intended for:**
- ✅ Practical training in security courses
- ✅ Daily documentation for Classified Protection evaluation and security delivery implementation positions
- ✅ Research on vulnerability principles in the local DVWA authorized testing environment
**This repository is strictly prohibited from being used for:**
- ❋ Unauthorized penetration testing
- ❋ Exploitation of real business systems
- ❋ Any actions that violate the Cybersecurity Law or Data Security Law
**This repository does not contain:**
- ❋ Exploit EXPs, vulnerability exploitation scripts, or webshell source code
- ❋ Hacking tools, phishing pages, or malicious payloads
- ❋ Real enterprise assets or customer internal network information
---
## 📋 Repository Overview
This repository records practical training for students majoring in information security technology at Xiamen Software Technology Institute. It includes full sets of security assessments and reinforcement exercises using the DVWA platform in an LAMP environment, materials related to Classified Protection 2.0, and notes on practical use of security tools like Nmap, Xray, Burp Suite, and dirsearch. All content is tailored to meet the needs of enterprise Classified Protection evaluations and security delivery engineers. Key features include:
- Structured and readable documentation (in line with security service delivery report standards)
- Emphasis on understanding vulnerability principles and implementing defensive measures
- Reproducible steps for tool usage
- Strict adherence to authorized testing boundaries
---
## 📁 Repository Module Descriptions
### 1. DVWA Penetration Testing (`01-DVWA Penetration Testing/`)
A multi-level DVWA environment built using LAMP. This repository includes manual demonstrations of 7 common web vulnerabilities (brute force attacks, SQL injections, XSS, file uploads, CSRF, command injections, file inclusion). It covers complete environment setup, vulnerability explanations, classification of vulnerabilities into Low/Medium/High/Impossible levels, log analysis, risk assessment, and 8 system reinforcement solutions. This repository aligns with enterprise Classified Protection evaluations and security delivery processes.
### 2. Classified Protection 2.0 Materials (`02-ClassifiedProtection2.0 Materials/`)
This repository contains basic theories related to Classified Protection 2.0, standardized asset inventory templates, field inspection record forms, and criteria for vulnerability risk classification. These materials are suitable for after-sales services by security vendors and daily documentation for Classified Protection inspections.
### 3. Security Tool Usage Notes (`03-Tool Usage Notes/`)
This repository includes notes on practical commands for Nmap, Xray, Burp Suite, dirsearch, and Linux/Windows server operations. These notes help users quickly recall and reuse useful information during training.
### 4. Compliance Assistant Scripts (`04-Compliance Assistant Scripts/`)
Two simple Python scripts: Apache/Nginx log parsing and automatic generation of inspection document templates. These scripts are only used for compliance log filtering and document preparation. They do not include functions for vulnerability scanning or attack packet generation.
---
## 🛠️ Technology Stack
| Category | Tools/Technologies |
|---|---|
| Operating Systems | Linux (Kali 2023.4), Windows Server |
| Web Environment | Apache 2.4.58, MySQL 5.x, PHP 8.x |
| Penetration Testing Platform | DVWA (Damn Vulnerable Web Application) |
| Security Testing | Nmap, Xray, Burp Suite Community, dirsearch |
| Scripting Language | Python 3.x |
| Documentation | Markdown |
---
## 🎯 Suitable for Job Applications
- **Cybersecurity Interns**: The training content aligns with daily work requirements for interns.
- **Security Delivery Engineers**: The documentation and reinforcement solutions are in line with delivery standards.
- **Classified Protection Evaluation/Inspection Technicians**: Materials related to Classified Protection can be directly reused.
**Short-term travel is acceptable. Skills include writing security documentation, troubleshooting client equipment, and verifying basic vulnerabilities.**
---
## 📂 Navigation
```
Security-Learning-Notes/
├── README.md ← Current file
├── 01-DVWA Penetration Testing/
│ ├── Environment Setup Documentation.md
│ ├── Vulnerability Demonstrations/
│ │ ├── Brute Force Attacks.md
│ │ ├── SQL Injection.md
│ │ ├── XSS Cross-Site Scripting.md
│ │ ├── File Upload Vulnerabilities.md
│ │ ├── CSRF Cross-Site Request Forgery.md
│ │ ├── Command Injection.md
│ │ └── File Inclusion Vulnerabilities.md
│ ├── Log Analysis.md
│ ├── Risk Assessment Report Template.md
│ └── System Reinforcement Solutions.md
├── 02-ClassifiedProtection2.0 Materials/
│ ├── Asset Inventory Template.md
│ ├── Security Field Inspection Record Form.md
│ ├── Basic Standards for Classified Protection Evaluation.md
│ └── Vulnerability Risk Classification Criteria.md
├── 03-Tool Usage Notes/
│ ├── Common Nmap Scan Commands.md
│ ├── Xray Basic Operations Manual.md
│ ├── Burp Suite Basic Usage.md
│ ├── dirsearch Directory Breaching.md
│ ├── Linux Operations Security Common Commands.md
│ └── Windows Server Basic Configuration.md
├── 04-Compliance Assistant Scripts/
│ ├── Simple Log Parsing.py
│ └── Automatic Inspection Document Generation Template.py
└── Screenshots/ ← Training Screenshot Archive
├── Brute-Force/
├── SQL Injection/
├── XSS/
├── File Upload/
└── Tools/
```
---
## 📜 Citation Guidelines
If you wish to cite the content of this repository, please indicate the source (school, training date). **The content of this repository must not be used for unauthorized penetration testing, attacks, or commercial training purposes.**
---
## 📄 Disclaimer
The author of this repository assumes no responsibility for any legal consequences arising from the misuse of the repository’s content. Users must ensure that their testing activities are legally authorized and comply with local laws and regulations.