All projects
security
Break an app, then fix it
Exploit the OWASP Top 10 in a deliberately weak app, then write the patches.
Why it matters
Reading about SQL injection and performing one are different kinds of knowledge. Security teams hire the second kind.
What you build
- Working exploits for several Top 10 categories
- A written explanation of each root cause
- Patches that actually close them
- A regression test per vulnerability
If you want more
- Add a CI security scan
- Write it up as a report
Build it
Locally. Never point this at anything you do not own.
Shows you can find and fix vulnerabilities, and that you test that they stay fixed.
Get a plan built around projects like this