Internal Lab Validation

Scope

Use for active validation on a registered internal lab owned by you or your team: your WordPress lab, a local LXC/VM, or a self-hosted service. This is where vulnerability checks, detector tests, and exploit PoCs are allowed to run.

Not for client infrastructure. A client retest needs current written authorization (target, technique class, source host, window) and an approved source host in your lab subnet (e.g. 10.0.0.0/24); until then, client work is document-only.

Maintain a lab registry (allowed targets and reset commands) and a small runner script; the examples below assume flags --i-own-the-lab, --target, --out.

Hard rules