Skunkworks Academy · Evidence-led technical practice
Map the surface. Select the tool. Validate with evidence.
Original browser-guided labs for digital foundations, cloud, networking, identity, API contracts, vulnerability scanning, web application testing, Linux, data and controlled security validation.
catalog/labs.json…Security scanning and validation track
NETWORKOpenVAS & Nmap NSE
Build a bounded service and vulnerability inventory, inspect script risk, correlate evidence and convert results into remediation-ready findings.
2 guided labs →WEBBurp Suite, ZAP, Nikto & Wapiti
Map authenticated workflows, govern active scanning, measure coverage, validate findings and distinguish server hardening from application risk.
4 guided labs →CMSWPScan, Droopescan & CMSmap
Fingerprint CMS platforms, confirm components and versions, assess vulnerability applicability and create update and hardening plans.
3 guided labs →WIRELESSAircrack-ng & Kismet
Analyse synthetic captures and recorded passive-monitoring data without deauthentication, packet injection or third-party network interaction.
2 guided labs →SYSTEMLynis Linux Security Audit
Validate local audit findings, prioritise hardening work and define rollback and retest criteria for a controlled Linux target.
75 minutes →VALIDATIONMetasploit Vulnerability Validation
Correlate scanner evidence, review modules, check first, collect minimal proof and reset an isolated target after approved validation.
90 minutes →LAB-SEC-390Integrated Security Assessment Capstone
Combine network, web, CMS, wireless, Linux and exploitability evidence into one traceable assessment and executive remediation plan.
150 minutes · Applied assessment →API description lab track
LAB-API-101SOAP Message & Schema Analysis
Trace envelopes, namespaces, headers, bodies, faults and XSD constraints before defining a safe test charter.
60 minutes · Foundation to intermediate →LAB-API-102Swagger / OpenAPI Contract Review
Map paths, operations, parameters, request bodies, responses and security schemes from an OpenAPI description.
75 minutes · Intermediate →LAB-API-103GraphQL Schema & Query Security
Use schema-first reasoning to minimise queries and identify object-level authorisation, depth and data-exposure tests.
75 minutes · Intermediate →LAB-API-104WSDL Service Contract Mapping
Separate abstract interface definitions from concrete bindings, services and endpoints in a WSDL 2.0 contract.
60 minutes · Intermediate →LAB-API-105WADL Legacy API Discovery
Extract resources, methods, parameters and representations from a legacy WADL description and assess migration risk.
60 minutes · Intermediate →LAB-API-190API Contract Reconnaissance Capstone
Compare all five formats and produce a defensible, prioritised API test plan with evidence requirements.
90 minutes · Applied assessment →Safe delivery model
The security tool labs use a private fictional range, resettable targets, offline wireless evidence and synthetic reports. The API labs use local fixtures. Active testing is permitted only against systems explicitly included in a written authorisation and rules-of-engagement document.
Existing practical labs
The Docusaurus build preserves the existing browser labs and publishes the machine-readable catalogue at catalog/labs.json. Availability on this landing page is driven by each catalogue record's status field.