Test a Web Application Using Python
In this lab, you’ll practice using the Python scripting language and look at the different ways Python can be used to help perform web application testing. When you’re finished, you’ll have the necessary skills and knowledge to perform web application testing within python for daily activities relevant to pen testing and offensive security.
Terms and conditions apply.
Getting Started in the Lab Environment
Here are the initial instructions and explanation of the lab environment. Read this while your environment is busy creating itself from nothing. Yes, this violates physics; we know. How fun!
In this challenge you will use Python to change the behavior of requests you make to a website. You will learn to automate connecting to a web application and pretend to be a different device in an attempt to hide who you are and mask your real intention as a red teamer.
In this challenge you will use Python to look for hidden resources and sensitive files as part of an ongoing penetration test. You will learn to automate the technique to search for hidden resources using a dictionary of common names with Python and its powerful libraries.
Brute Force Login Page
In this challenge you will use Python to test the strength of the website login page protecting your company website. You will learn to automate the technique to connect to the website and test using a dictionary of passwords and all with Python!
The Last Challenge
Welcome to the final challenge! This is your last chance to experiment in the environment. Clicking Finish Lab will end this little world that flittered into existence just for you.
Provided environment for hands-on practice
We will provide the credentials and environment necessary for you to practice right within your browser.
Follow along with the author’s guided walkthrough and build something new in your provided environment!
Did you know?
On average, you retain 75% more of your learning if you get time for practice.
- ● Basic computer and internet knowledge including some experience of using a command line terminal and knowing what an IP address is.
- ● Basic scripting knowledge of python