Stage 2 · Lesson 5 of 7

Running targets in containers

Many practice apps come as images. Docker runs an app in a , a small sealed box that starts in seconds and resets cleanly. Learn enough to pull an image, run it, stop it and remove it.

When you run it, map its to only. Localhost binding means using the address 127.0.0.1, which only your own computer can reach. The app then opens in your browser but not from anywhere else on your network.

You will also use containers later to run a log stack or a scanner on the defensive and paths. Keep a small file of the commands you use, so you can rebuild your lab on any machine.

Common trappublishing a port on 0.0.0.0 out of habit, which makes a vulnerable app visible to every device on the same network.

A question to check yourself, an AI practice session and 1 cheat sheet entry come with the full roadmap. Unlock

Resources for this stage

Start with

GuideFree
Docker Docs: Get Started
Docker · Beginner
Enough Docker to run, reset and remove practice targets and tools cleanly

Practise

OWASP Juice Shop
The standard intentionally vulnerable web app: run it locally and use it throughout your path
Web Security Academy
Free web security labs with clear explanations of each weakness and its prevention

Keep handy

Wireshark User's Guide
Capture and read your own lab traffic to see what normal and unusual look like

Also worth your time

Linux Upskill ChallengeGo deeper
A month of daily tasks on a real Linux server if you want your Linux administration to be solid