docs: update lab READMEs with container info and references

- Add lab names and container info to Command_Injection, GraphQL,
  Multi-Vulnerability-Gauntlet, Path_Traversal, deserial-gate, and
  render-reign READMEs
- Add references sections with O'Reilly resources and training links
- Update main README with git clone install instructions
- Add .cursor/ to .gitignore

This standardizes documentation across all labs with consistent
container names, IPs, ports, and reference materials.

Author: santosomar

.gitignore

@@ -12,3 +12,6 @@ __pycache__
 websploit.db
 uploads
 backups
+
+# Cursor
+.cursor/

README.md

@@ -27,10 +27,12 @@ Download and install **Kali Linux** or **Parrot OS** (whichever you prefer) in a
 ---
 
 ### Step 2: Install WebSploit Labs
-Once your Kali or Parrot VM is ready, open a terminal and run the following command to set up WebSploit Labs:
+Once your Kali or Parrot VM is ready, open a terminal and run the following commands to clone the repository and set up WebSploit Labs:
 
 ```bash
-curl -sSL https://websploit.org/install.sh | sudo bash
+git clone https://github.com/The-Art-of-Hacking/websploit.git
+cd websploit
+sudo bash install.sh
 ```
 
 This script will:

additional-labs/Command_Injection/README.md

@@ -1,5 +1,8 @@
 # Command Injection Lab
 
+**Lab Name:** `shell-inject`
+**Vulnerability:** OS Command Injection
+
 This lab demonstrates an OS Command Injection vulnerability in a web application.
 
 ## Scenario
@@ -11,20 +14,7 @@ Exploit the command injection vulnerability to execute arbitrary commands on the
 ## Instructions
 
 1. **Access the Lab**: 
-   - URL: `http://localhost:5002`
-   
-2. **Analyze functionality**:
-   - Enter an IP address (e.g., `127.0.0.1`) and click "Ping".
-   - Observe the output.
-
-3. **Identify Vulnerability**:
-   - Try appending shell operators to your input. Common operators include `;`, `&&`, `|`.
-   - Example: `127.0.0.1; whoami`
-
-4. **Challenge**:
-   - List the files in the current directory (`ls -la`).
-   - Find the current user ID (`id`).
-   - Read the `/etc/passwd` file.
+   - This is running on the `shell-inject` container on the `10.6.6.34` IP address. Access the lab at `http://10.6.6.34:5002`
 
 ## Explanation
 The application constructs a shell command like this:
@@ -34,3 +24,41 @@ subprocess.run(command, shell=True, ...)
 ```
 Because `shell=True` is used and `target` is not sanitized, an attacker can terminate the `ping` command and start a new one.
 
+## References
+For more information on command injection vulnerabilities and secure coding practices, check out these resources:
+
+## Live Training
+**Upcoming Live Cybersecurity and AI Training in O'Reilly:** [Register before it is too late](https://learning.oreilly.com/search/?q=omar%20santos&type=live-course&rows=100&language_with_transcripts=en) (free with O'Reilly Subscription)
+
+## Reading List
+
+- **Redefining Hacking**
+A Comprehensive Guide to Red Teaming and Bug Bounty Hunting in an AI-driven World [Available on O'Reilly](https://learning.oreilly.com/library/view/redefining-hacking-a/9780138363635/)
+
+- **Developing Cybersecurity Programs and Policies in an AI-Driven World**  
+  Explore strategies for creating robust cybersecurity frameworks in an AI-centric environment. [Available on O'Reilly](https://learning.oreilly.com/library/view/developing-cybersecurity-programs/9780138073992)
+
+- **Beyond the Algorithm: AI, Security, Privacy, and Ethics**  
+  Gain insights into the ethical and security challenges posed by AI technologies. [Available on O'Reilly](https://learning.oreilly.com/library/view/beyond-the-algorithm/9780138268442)
+
+## Video Courses
+
+- **Building the Ultimate Cybersecurity Lab and Cyber Range (video)** [Available on O'Reilly](https://learning.oreilly.com/course/building-the-ultimate/9780138319090/)
+
+- **Defending and Deploying AI (video)**  This course provides a comprehensive, hands-on journey into modern AI applications for technology and security professionals, covering AI-enabled programming, networking, and cybersecurity to help learners master AI tools for dynamic information retrieval, automation, and operational efficiency. [Available on O'Reilly](https://www.oreilly.com/videos/defending-and-deploying/9780135463727/)
+
+- **AI-Enabled Programming, Networking, and Cybersecurity**
+Learn to use AI for cybersecurity, networking, and programming tasks. [Available on O'Reilly](https://learning.oreilly.com/course/ai-enabled-programming-networking/9780135402696/)
+
+- **Securing Generative AI**
+Explore security for deploying and developing AI applications, RAG, agents, and other AI implementations. [Available on O'Reilly](https://learning.oreilly.com/course/securing-generative-ai/9780135401804/)
+
+- **Certified Ethical Hacker (CEH), Latest Edition** [Available on O'Reilly](https://learning.oreilly.com/course/certified-ethical-hacker/9780135395646/)
+
+## Additional Resources
+
+- **Hacking Scenarios (Labs) in O'Reilly**: [https://hackingscenarios.com](https://hackingscenarios.com)
+- **GitHub Repository**: [Visit GitHub Repo](https://hackerrepo.org)
+- **WebSploit Labs**: [Visit WebSploit Labs](https://websploit.org)
+
+

additional-labs/GraphQL/README.md

@@ -13,7 +13,8 @@ This lab simulates a futuristic communications hub that exposes a GraphQL API. T
 - Learn how to use GraphiQL to interact with the API.
 
 ## Installation
-This lab is part of the WebSploit Labs framework.
+This lab is part of the WebSploit Labs framework and it is running on the `graphql-galaxy` container on the `10.6.6.44` IP address.
+
 To run it individually:
 ```bash
 docker build -t graphql-galaxy .
@@ -26,3 +27,23 @@ docker run -p 5023:5023 graphql-galaxy
 3.  **Exploitation:** Query the `user` field with the ID of the administrator (`1`) and request the `api_token`.
 4.  **Flag:** The flag is the value of the administrator's `api_token`.
 
+## References
+For more information on GraphQL security vulnerabilities and secure coding practices, check out these resources:
+
+- **Redefining Hacking: A Comprehensive Guide to Red Teaming and Bug Bounty Hunting in an AI-driven World** - [Available on O'Reilly](https://learning.oreilly.com/library/view/redefining-hacking-a/9780138363635/)
+- **Developing Cybersecurity Programs and Policies in an AI-Driven World** - [Available on O'Reilly](https://learning.oreilly.com/library/view/developing-cybersecurity-programs/9780138073992)
+- **Beyond the Algorithm: AI, Security, Privacy, and Ethics** - [Available on O'Reilly](https://learning.oreilly.com/library/view/beyond-the-algorithm/9780138268442)
+- **The AI Revolution in Networking, Cybersecurity, and Emerging Technologies** - [Available on O'Reilly](https://learning.oreilly.com/library/view/the-ai-revolution/9780138293703)
+
+## Additional References
+
+- **Building the Ultimate Cybersecurity Lab and Cyber Range (video)** - [Available on O'Reilly](https://learning.oreilly.com/course/building-the-ultimate/9780138319090/)
+- **Build Your Own AI Lab (video)** - [Available on O'Reilly](https://learning.oreilly.com/course/build-your-own/9780135439616)
+- **Defending and Deploying AI (video)** - [Available on O'Reilly](https://www.oreilly.com/videos/defending-and-deploying/9780135463727/)
+- **AI-Enabled Programming, Networking, and Cybersecurity** - [Available on O'Reilly](https://learning.oreilly.com/course/ai-enabled-programming-networking/9780135402696/)
+- **Securing Generative AI** - [Available on O'Reilly](https://learning.oreilly.com/course/securing-generative-ai/9780135401804/)
+- **The Art of Hacking** - [Visit The Art of Hacking](https://theartofhacking.org)
+- **Hacking Scenarios (Labs) in O'Reilly** - [https://hackingscenarios.com](https://hackingscenarios.com)
+- **GitHub Repository** - [Visit GitHub Repo](https://hackerrepo.org)
+- **WebSploit Labs** - [Visit WebSploit Labs](https://websploit.org)
+- **NetAcad Ethical Hacker Free Course** - [Available (free) on NetAcad Skills for All](https://www.netacad.com/courses/ethical-hacker?courseLang=en-US)