TryHackMe Walkthrough Demonstrates Web Testing With curl
· 31:06 · Watch on YouTube ↗
Summary
A TryHackMe Advent of Cyber walkthrough demonstrates using curl to send HTTP requests, manage session cookies, test weak passwords and bypass a user-agent check in a practice environment.
Key points
- The walkthrough uses curl to send GET and POST requests and inspect response bodies and headers.
- It demonstrates saving cookies to a file and reusing them in later requests to maintain a session.
- A Bash loop tests a short password list against a practice login form and identifies the working password.
- The presenter bypasses a practice server's user-agent check by specifying the expected header value.
- An optional bonus challenge involves finding endpoints, authenticating and obtaining an operator token; the presenter does not complete it in the video.