This challenge covers how to send specific HTTP requests

< 1 Hr.
HTTP Badge


In this challenge, you must send a GET request to /pentesterlab;pentesterlab. This type of request is especially useful when testing applications with multiple layers of reverse proxies. The semicolon (;) has special meanings in HTTP and shells, making this challenge a bit tricky.

We recommend starting with curl to solve this challenge. Afterward, you can write a script in your favorite language, which will help you build a reusable collection of scripts. Leveraging your previous code for GET requests can be beneficial while writing your script. During the video tutorial, we demonstrate the challenge using curl and explain the issues caused by the semicolon in the shell. We show how to resolve this by using single quotes to correctly send the request.

Want to learn more? Get started with PentesterLab Pro! GO PRO