ROT HACKERSACADEMYStart learning
Courses06 / WEB MODULES

Recon & Web Assessment

Use WSHawk's crawler, directory, HTTP, headers, TLS, CORS, CSRF, WAF, sensitive-data, and chaining modules as one scoped workflow.

Practitioner6-8 hours6 lessons6 guided labs
Begin lesson 01 ↗
COURSE SYLLABUS

Do the work in order.

  1. 01
    60 min

    Crawl, discover directories, and detect soft 404s

    Combine links, scripts, robots, sitemaps, OpenAPI, and bounded path discovery into an endpoint map.

  2. 02
    60 min

    Analyze headers, technology, WAF, and sensitive data

    Interpret missing controls and exposed signatures without turning every informational signal into a vulnerability.

  3. 03
    55 min

    Use DNS, WHOIS, subdomain, and port discovery responsibly

    Understand the public recon modules, their scope requirements, and why a localhost lab cannot fabricate passive internet truth.

  4. 04
    60 min

    Inspect TLS, CORS, and origin policy

    Combine certificate inspection with browser-origin policy and secure WebSocket origin validation.

  5. 05
    60 min

    Forge and verify CSRF requests

    Build an authenticated cross-site request, compare token enforcement, and restore state.

  6. 06
    65 min

    Forge, replay, and chain HTTP attacks

    Use every HTTP method, templates, regex extraction, variable substitution, and bounded request flows.