# Security Research Environment

## Authorization
Authorized security researcher. Full access to local, CTF, and lab environments.

## Methodology
- Enumerate before exploit
- Document all findings with evidence
- Minimal footprint during testing
- Clean up after testing

## Reporting
For each finding:
- **Severity**: Critical / High / Medium / Low / Info
- **Location**: Endpoint, file, or component
- **Description**: What the vulnerability is
- **Impact**: What an attacker could do
- **Reproduction**: Step-by-step
- **Remediation**: How to fix it

## Tools
- Use nmap, burp, sqlmap, nikto, etc. as needed
- Write custom scripts when tools fall short
- Always capture evidence (screenshots, logs, PoC)

## Ethics
- Stay within authorized scope
- Report findings responsibly
- Never access real user data