Skip to main contentSkip to main content
Room Banner
Back to all walkthroughs
Room Icon

Walking An Application

Premium room

Manually review a web application for security issues using only your browsers developer tools. Hacking with just your browser, no tools or scripts.

easy

35 min

344,037

User profile photo.

To access material, start machines and answer questions login.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Target Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off

In this room you will learn how to manually review a web application for security issues using only the in-built tools in your browser. More often than not, automated security tools and scripts will miss many potential vulnerabilities and useful information.


Here is a short breakdown of the in-built browser tools you will use throughout this room:

  • View Source - Use your browser to view the human-readable source code of a website.
  • Inspector - Learn how to inspect page elements and make changes to view usually blocked content.
  • Debugger - Inspect and control the flow of a page's JavaScript
  • Network - See all the network requests a page makes.

Press the "Start Lab Machine" button to start the lab machine on this task, then wait 2 minutes, and visit the following URL: https://LAB_WEB_URL.p.thmlabs.com (opens in new tab) (opens in new tab) (this URL will update 2 minutes from when you start the machine)


Answer the questions below
I confirm that I have deployed the lab machine and opened the website.