TryHackMe rooms
Corresponding practice
- On the room’s authorised target, capture one normal request and save it as the baseline.
- Send it to Repeater and change only one query value, body value, cookie, or header per attempt.
- Record the status code, response length, and meaningful body difference for at least five variations.
- Use Decoder or Comparer once and note when it is more useful than reading responses side by side.
Evidence to capture
- One sanitised baseline request and response
- A small request-change/result table
- The keyboard shortcuts or steps used to move from Proxy to Repeater
What I learned
Explain how controlled request changes make manual web testing reproducible.
Problems and dead ends
Record changes that produced no useful difference and why.
What I will revisit
Name one request manipulation to repeat without guidance.