HTTP Basics Part 3 | Web Application Security | Cycubix Docs

Learn what type of HTTP command WebGoat used for this lesson. Discover the solution to the HTTP quiz we offered as part of our web application security course

The Quiz

What type of HTTP command did WebGoat use for this lesson. A POST or a GET.

Solution

The HTTP request observed in the previous exercise was a POST message. The magic number is hidden in the web page's JavaScript. One of the methods to view this is to right click on the web page and select "Inspect Element". In the section where the web page's HTML appears, search for the phrase "magic" until you identify the value stored by the hidden magic_num field.