Walking An Application

In this room, you will learn how to manually review a web application for security issues using only the built-in tools in your browser. More often than not, automated security tools and scripts will miss many potential vulnerabilities and useful information.

Learning Objectives

By the end of this room, you will be able to:

• Use your browser to view the human-readable source code of a website
• Inspect page elements and make changes to view the usually blocked content
• Inspect and control the flow of a page's JavaScript
• Identify the network requests a page makes
• Identify locally stored data by a website

Prerequisites

You should have an understanding of the following rooms before starting:

• Web Application Basics
• HTTP In Detail

Machine Access

Launch the AttackBox using the Start AttackBox button, and the Target machine using the Start Machine button below. Then, use Mozilla Firefox on the AttackBox to navigate to http://MACHINE_IP to access the website, which we will use throughout this room to understand the fundamental concepts.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Target Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.

Attacker machine

Status:Off

Target machine

Status:Off

Start Machine