01
π
Lesson 1: RequestLab β trace an HTTP request
Build a minimal Django site and trace a request from the browser and curl through β¦
β±οΈ ~3 h 40 min
π 11 tasks
02
π
Lesson 2: CaseBook β models, migrations, and the ORM
Persist training cases in SQLite, inspect ORM queries, and configure a safe admin site.
β±οΈ ~3 h
π 9 tasks
03
π
Lesson 3: CaseBook Web β templates, forms, and CRUD
Build a server-rendered UI where data passes through ModelForm, CSRF protection, and clear error states.
β±οΈ ~3 h
π 9 tasks
04
π
Lesson 4: Private Diary Lab β authentication and ownership
Reproduce IDOR against local fixtures, then close the leak with ownership checks and regression tests.
β±οΈ ~3 h
π 9 tasks
05
π
Lesson 5: FieldNotes β a Django JSON API
Build a focused JSON API with standard Django: methods, validation, idempotency, and access control.
β±οΈ ~3 h
π 9 tasks
06
π
Lesson 6: SecureLab β tests, performance, and defenses
Measure queries, test XSS/CSRF/host headers, and enable Django 6's built-in CSP in a safe lab.
β±οΈ ~3 h
π 9 tasks
07
π
Lesson 7: CaseBook Production β PostgreSQL, Docker, and deployment
Take the project to production-ready state with environments, Postgres, static assets, health checks, and deploy β¦
β±οΈ ~3 h
π 9 tasks