Tool simulation
HTTP Proxy Lab
Traffic workflow
Review the proxy history and select the request that trusts a client-supplied internal header.
1.Open each synthetic exchange in the proxy history.
2.Inspect the request and response for the risky trust boundary or exploit clue.
3.Type the suspicious request id or defensive control keyword, then submit.
GEThttps://app.local/profile Synthetic
Request
Response
1HTTP/1.1 200 OK
2
3{
4 "role": "user"
5}Proxy history
Send the edited request to observe the server-side effect. Successful exploit simulations reveal a training flag.
Edit the raw request, send it, and watch the response for a successful exploit signal or training flag before submitting.
active: normal