TryHackMe: Web Fundamentals Walkthrough

Learn how the web works!

TryHackMe | Web Fundamentals

Task[1]: Intro

Task[2]: How do we load websites?

Read and understand the information and get the answers to the questions.

Task[3]: More HTTP — Verbs and request formats

Read and understand the information to get the answers to question 1–3.

I got the answer to the questions 4 and 5 by visiting the link which was provided in the information part: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status

Task[4]: Cookies, tasty!

Read and understand the information.

Task[5]: Mini CTF

Read and understand the information.

Task:

There’s a web server running on http://MACHINE_IP:8081. Connect to it and get the flags!

• GET request. Make a GET request to the web server with path /ctf/get
• POST request. Make a POST request with the body “flag_please” to /ctf/post
• Get a cookie. Make a GET request to /ctf/getcookie and check the cookie the server gives you
• Set a cookie. Set a cookie with name “flagpls” and value “flagpls” in your devtools and make a GET request to /ctf/sendcookie

We can do the assigned task both by using our browser or using curl command in terminal.

Task 5–1: What’s the GET flag?

Answer:

To make a get request the command used is:

curl http://10.10.19.91:8081/ctf/get

Another way to do this task is that we can directly visit http://10.10.19.91:8081/ctf/get in our browser. By default the browser makes a GET request.

Task 5–2: What’s the POST flag?

Answer:

To make a POST request the command used is:

curl -X POST — data flag_please http://10.10.19.91:8081/ctf/post

• -X flag is used to specify the request type. curl make a GET request by default.
• — data flag is used to send a data along with the request

Task 5–3: What’s the “Get a cookie” flag?

Answer:

Again there are two ways to do this task. One is using browser and the other is using terminal.

Using browser:

Make a request to: http://10.10.19.91:8081/ctf/getcookie

To check the cookies(For firefox browser): Right click on the page>>Inspect Element>> Storage>> Cookies>> Get the flag

Using terminal:

Use the command: curl -c - ‘10.10.19.91:8081/ctf/getcookie’

Task 5–4: What’s the “Set a cookie” flag?

Answer:

curl — cookie ‘name=value’ URL

curl — cookie ‘flagpls=flagpls’ http://10.10.19.91:8081/ctf/sendcookie

— cookie is used to set a cookie.

Thanks for reading!!!