@article{kontowicz2024web,
  title = {WEB Application Security Testing: A Practical Example of Laboratory Setup},
  author = {Piotr KONTOWICZ},
  year = 2024,
  url = {https://ibimapublishing.com/p-articles/44SE/2024/4445424/},
  journal = {Communications of International Proceedings},
  volume = 2032 (24),
  doi = doi.org/10.5171/2024.4445424,
  abstract = {This document outlines a comprehensive framework for web application security training, using a structured, isolated environment to cover both basic and advanced vulnerability classes. Leveraging VirtualBox, it demonstrates a virtual lab setup with a tester machine and a vulnerable web application, focusing on hands-on exercises like Capture The Flag (CTF) challenges to help participants master prevalent security issues. Aligned with real-world scenarios through the inclusion of OWASP Top Ten vulnerabilities, this setup ensures practical, applicable learning. Future enhancements will introduce remote server-based environments, enabling scalable, individualized instances to prevent interference and optimize learning. Designed for academic and professional use, this framework provides a robust foundation for developing security expertise in a realistic, controlled setting.},
  keywords = {Web Application Security, Security Testing Environment, Penetration Testing.},
  note = Article ID: 4445424
}