Pentesting Lab

Clients & Servers

Learn to identify the two sides of every web conversation and the signals a pentester can pull from each.

Module 1: How the Web Works Task 1 of 4 25 min 90 XP 100 coins Student Demo answers accepted

Room progress 0 / 4 tasks

Evidence 0 / 4 items

Hints Available per task

Validation Prototype flexible

Clients & Servers Room details

Description

Learn to identify the two sides of every web conversation and the signals a pentester can pull from each.

Objective

Your goal is to understand the difference between a client and a server, and prove it by inspecting a real request/response pair on our lab website.

What you'll learn

How a client turns a URL into a request
What a server sends back and why
How to read headers, methods and status codes
How to spot server software from responses

Evidence & scoring

Concept confirmation
Tool output or observed signal
Finding note
Completion validation
Knowledge: 25%
Tool Workflow: 25%
Evidence Quality: 30%
Completion: 20%

Task 1 of 4

What is a client?

A client is anything that initiates a request - browsers, mobile apps, scripts, even other servers. In this task, open the lab site and identify what your browser reveals about itself in its request.

Open the Website panel, inspect the request context and look for the browser identity signal.

Need a hint?

Look for the User-Agent request header.