With the rapid growth of web applications, security vulnerabilities have become a major concern in modern systems. Many applications remain vulnerable due to improper input validation and insecure coding practices. This project presents an OWASP Immersive Web Security Lab designed to provide hands-on learning of common web vulnerabilities such as SQL Injection (SQLi), Cross-Site Scripting (XSS), Command Injection, File Upload Vulnerabilities, and Path Traversal. The system uses a controlled environment where users can perform attacks and observe system behavior in real time. The platform is developed using web technologies and Docker-based containerization to ensure safe and isolated lab environments. It also includes quizzes and automated verification to evaluate user performance. The results show that the system improves understanding of web security concepts and helps users learn secure coding practices effectively. This project serves as a practical educational tool and a foundation for advanced cybersecurity training systems.
Sasmita.M et al. (2026) studied this question.