This challenge covers how to send specific HTTP requests

< 1 Hr.
HTTP Badge


In this challenge, you need to send a POST request to the endpoint /pentesterlab, ensuring that both GET and POST parameters named "key" have the value "please." This scenario can trigger unusual behaviors in applications, especially when multiple layers of proxying are used. We recommend starting with the curl command-line tool to solve this challenge, then writing a script in your preferred language to automate the process. This approach allows you to build a reusable collection of scripts for future tasks.

To solve this challenge, jump into a terminal and type the curl command to send the GET and POST parameters. Remember to enclose the URL in single quotes if your shell doesn't parse it correctly. You can use the --data option to specify the POST parameter and -v to verify the request. This exercise will help you understand how to handle requests with duplicate parameters and prepare you for more complex scenarios.

Want to learn more? Get started with PentesterLab Pro! GO PRO