ROT HACKERSACADEMYStart learning
Courses01 / FLAGSHIP PATH

WSHawk Practitioner

Build a reliable WSHawk workflow from project setup and identity capture through HTTP, GraphQL, and WebSocket replay.

Foundation5–7 hours5 lessons5 guided labs
Begin lesson 01 ↗
COURSE SYLLABUS

Do the work in order.

  1. 01
    25 min

    Install, scope, and start safely

    Install the correct WSHawk edition, launch the localhost lab, and create an isolated project with a precise target boundary.

  2. 02
    35 min

    Record User A, User B, and Admin

    Capture three independent authenticated browser states and store each one as a named project identity.

  3. 03
    40 min

    Capture and replay HTTP

    Build a request in HTTP Forge, replay it under different identities, and distinguish raw headers from stored identity state.

  4. 04
    45 min

    Discover object candidates

    Find object identifiers in paths, queries, JSON, GraphQL variables, UUIDs, and captured traffic without unbounded guessing.

  5. 05
    45 min

    Connect, capture, and replay WebSockets

    Connect to the lab WebSocket, inspect frames, and replay a room subscription under stored identities.