Install, scope, and start safely · WSHawk Practitioner

Controlled exercise

Use only the Academy Lab on 127.0.0.1:5177. Do not copy these tests to a public system without explicit written authorization.

Install WSHawk

Download the Electron + Go package for your operating system. Launch it, accept the testing notice, and confirm the version shown in the application is 4.0.4 or newer.

https://github.com/regaan/wshawk/releases/tag/electron-go-v4.0.4

Start the controlled lab

Download the Academy Lab, extract it, run npm install, then npm start. Keep the terminal open. The service must report a loopback address.

http://127.0.0.1:5177/health

Expected result

200 · {"status":"ok","local_only":true}

Create a dedicated project

Open the Electron + Go edition, accept the authorized-testing notice, create a project named Academy Lab, and set its target origin to the exact local URL above.

Expected result

The project header shows Academy Lab and the target is 127.0.0.1:5177.

Prove the boundary

Open Web → HTTP Forge, send GET /health, and save the response. Do not add any non-lab host to this project.

Expected result

A 200 response names wshawk-academy-lab and local_only is true.

MASTERY CHECKPOINT

Prove it before moving on.

You can reopen the project, send GET /health, and explain exactly which host is authorized.