Attack & Defence Lab
A hands-on lab study of three common attack techniques, against a vulnerable web app, MS Office macros and Windows RDP, each one paired with the defence that stops it. Built in an isolated lab to learn both sides: how an attack works, and how to shut it down.
The idea
To defend a system you first need to see how it is attacked. In an isolated lab (Kali Linux plus a deliberately vulnerable web app and a Windows virtual machine) I reproduced three common attack techniques end to end, then documented the control that prevents each one. Every section ends with the fix, not the attack.
File-upload weakness
A web app that accepts file uploads without checks can be abused. The defences: validate the file type by both extension and MIME type, store uploads outside the web root, and turn off script execution in the upload directory.
Office macros
Documents can carry macros that run on open. The defences: disable macros by default, require trusted digital signatures, and keep Protected View on.
Exposed RDP
Remote Desktop left open to the internet is a common entry point. The defences: enforce multi-factor authentication, keep RDP behind a VPN or firewall instead of exposing it, and apply security patches promptly.
Why it is here
It shows I can both find a weakness and, more importantly, close it. The work is educational and was run only in an isolated lab with authorisation, never against systems I do not own.