Home labs & practical projects
Validate a scanner finding before reporting it
A project to do with your own tools, with guidance on what to create and capture.
What you could create
A training scanner reports a possible weakness on a deliberately vulnerable host. The assessor must decide whether the evidence supports the claim.
| Evidence | What to capture |
|---|---|
| Finding validation worksheet | Show the inputs, scope and decisions behind this record. The finding severity is justified by observed conditions. |
| Sanitised disposition and remediation note | Include the evidence supporting your conclusion. A product version alone is not presented as proof of exploitability. |
What you'll need
Authorised security lab
Use an authorised local target and the range’s safe assessment guidance. Select one finding and retain the scanner’s explanation and uncertainty.
Project record
Keep the working files for finding validation worksheet and record assumptions as you go.
Current reference material
Use the linked provider resources to verify the features, access terms and version relevant to your project.
Access & cost
Use a deliberately vulnerable local image or a licensed training range. Check the provider’s access terms and current price.
Only test systems you own or are explicitly authorised to assess. Keep targets isolated and use synthetic accounts and data.
Suggested milestones
- 1
Plan and investigate
Identify what the scanner observed and what it inferred.
- 2
Develop your approach
Use a permitted non-destructive validation method appropriate to the training target.
- 3
Verify and explain
Write a confirmed, unconfirmed or false-positive disposition with remediation context.
Useful resources
Use these resources to deepen your understanding and check key details.
Review the current provider requirements and relevant subject areas.
Check relevance, platform versions and current access terms.
Find relevant providers and check features, access requirements and costs.
A useful starting point
Use an authorised local target and the range’s safe assessment guidance. Select one finding and retain the scanner’s explanation and uncertainty.
What a good result looks like
- The finding severity is justified by observed conditions.
- A product version alone is not presented as proof of exploitability.
Finish the project
Revert target snapshots, remove test accounts and artefacts, and store a sanitised report. Do not publish credentials or working attack material.
Independent home-project guidance, not an official vendor lab or a claim of complete exam coverage. Use your own tools and label the work accurately.