EH-01: HTTP Fundamentals - Memahami Request, Response, Methods & Headers

Target: Memahami HTTP sebagai fondasi ethical hacking
Tools: curl, browser DevTools

Konsep

HTTP adalah protokol yang digunakan browser dan server untuk berkomunikasi. Setiap ethical hacker harus paham:

Request:                         Response:
  GET /index.html HTTP/1.1         HTTP/1.1 200 OK
  Host: example.com                Content-Type: text/html
  User-Agent: Chrome/120           Set-Cookie: session=abc
  Cookie: session=abc123           <html>...body...</html>

Praktikum

cd ~ && mkdir -p eth-lab && cd eth-lab

# 1. GET request
echo "=== 1. GET Request ==*"
curl -v  2>&1 | grep -E "^>|^<|HTTP|Content-Type"

# 2. POST request
echo ""
echo "=== 2. POST Request ==*"
curl -v -X POST http://httpbin.org/post \
  -H "Content-Type: application/json" \
  -d '{"user":"test"}' 2>&1 | grep -E "^>|^<|{|}"

# 3. Status codes
echo ""
echo "=== 3. Status Codes ==*"
echo "200 OK - Success"
echo "301 Moved - Redirect"
echo "401 Unauthorized - No auth"
echo "403 Forbidden - No permission"
echo "404 Not Found - Resource tidak ada"
echo "500 Server Error - Backend error"

# 4. Header analysis
echo ""
echo "=== 4. Header Analysis ==*"
curl -sI  2>/dev/null | head -10

️ Analisis

Metode HTTP	Fungsi
GET	Ambil data
POST	Buat data baru
PUT	Update data
DELETE	Hapus data
PATCH	Update partial

Refleksi: HTTP adalah dasar dari semua serangan web. SQLi, XSS, CSRF - semuanya memanipulasi HTTP requests. Kuasai HTTP, kuasai ethical hacking.

Generated by @farishhz Agent Pentest Pipeline - TDCTF Security Academy