I have a Attack and Defence security project for school and I dont know how to protect it since all classic ways are forbidden by rules ,so
Assume the following project :
A web application with the following functionality:
account registration.
Database connection where all information is stored.
Presentation of this information according to input from user.
The web app will be pentested on LAN level
Rules:
No firewalls allowed.
No fail2ban like applications.
No WAF.
No xss library can be used.
No mitm to inject javascript to add defence layers. (The project will be pentested from within the network.)
No https
Any help is appreciated.