CS Kairos Learn
CS KAIROS · LEARNING LIBRARY

M13 · Hacking Web Servers · Safe practice

This module uses offline data, self-created inputs or tabletop scenarios. Follow the steps and check the evidence you produce.

Offline exercise: review a release manifest

Use the four fictional filenames without reading real backups or secrets.

  1. Compare each file with the public-content allowlist.
  2. Write a pre-release blocking condition and a post-release check.
  3. Add expected HTTP states for a normal page and a nonexistent page.

Expected result

Exclude the backup. Expect 200 for a normal public page and 404 for a missing page.

Check your work

How would returning the homepage with 200 for every missing path affect error identification?

Finish and clean up

Save the synthetic checklist.