This full-day intensive workshop will guide attendees through setting up a secure testing environment, using common open-source security tools, and reporting exploitable flaws effectively.