# Advanced Web Application Penetration Testing

**URL:** https://legacy-community.ine.com/c/cyber-security/wapta/30.md

[Latest](https://legacy-community.ine.com/latest.md) · [Categories](https://legacy-community.ine.com/categories.md) · [Tags](https://legacy-community.ine.com/tags.md)

---

## [HOWTO: Resolve the lab domain](https://legacy-community.ine.com/t/howto-resolve-the-lab-domain/386)

<div class="topic-metadata">

**Author:** [@ELS\_Forum](https://legacy-community.ine.com/u/ELS_Forum)\
**Replies:** 0\
**Last updated:** [June 5, 2021, 6:49am UTC](https://legacy-community.ine.com/t/howto-resolve-the-lab-domain/386 "2021-06-05T06:49:42Z")

</div>

For your convenience, let me introduce the solution also here for generic linux or mac. First, in order to be able to resolve that domain you will need to add our (lab) DNS server to /etc/resolv.conf file. on mac, you …

---

## [About the Advanced Web Application Penetration Testing category](https://legacy-community.ine.com/t/about-the-advanced-web-application-penetration-testing-category/109)

<div class="topic-metadata">

**Author:** [@Don](https://legacy-community.ine.com/u/Don)\
**Replies:** 0

</div>

This category is dedicated to students undertaking the Advanced Web Application Penetration Testing (PTA) Learning Path for job readiness as a Sr. Pentester with a focus on WebApps, Bug Hunting or in prep for the eWPTXv2…

---

## [Facing problem during eWPTX exam](https://legacy-community.ine.com/t/facing-problem-during-ewptx-exam/6078)

<div class="topic-metadata">

**Author:** [@selvendranjay-2a0426](https://legacy-community.ine.com/u/selvendranjay-2a0426)\
**Replies:** 3\
**Last updated:** [October 14, 2025, 6:28am UTC](https://legacy-community.ine.com/t/facing-problem-during-ewptx-exam/6078 "2025-10-14T06:28:38Z")

</div>

I’m currently writng eWTPX exam. The lab environmnet has struck. I’ve cleared cookies, tried re-login. But its still loading for long time. I don’t know how to proceed. The time is ticking. Already 4.5 hrs wasted. Ki…

---

## [CSRF Lab 3 eWPTX ](https://legacy-community.ine.com/t/csrf-lab-3-ewptx/4037)

<div class="topic-metadata">

**Author:** [@andresbe.be-61ac4661](https://legacy-community.ine.com/u/andresbe.be-61ac4661)\
**Replies:** 1\
**Last updated:** [April 5, 2024, 8:36pm UTC](https://legacy-community.ine.com/t/csrf-lab-3-ewptx/4037 "2024-04-05T20:36:17Z")

</div>

Hello dear friends, I am trying to do csrf laboratory number 3 http//3.csrf.labs although the script to try to use the session works, I would not be able to do it with my user, something understandable but how do I get t…

---

## [Last advices before exam](https://legacy-community.ine.com/t/last-advices-before-exam/4255)

<div class="topic-metadata">

**Author:** [@ing.infantec-e6ab552](https://legacy-community.ine.com/u/ing.infantec-e6ab552)\
**Replies:** 1\
**Last updated:** [October 18, 2023, 10:28am UTC](https://legacy-community.ine.com/t/last-advices-before-exam/4255 "2023-10-18T10:28:14Z")

</div>

Hi everyone, I am plannig to start my eWPTX exam on 21st of October. Do you have some last advices to give to me? If someone want to do the exam in a similar dates, we can chat on discord (for example) to support and g…

---

## [eWPTXv2 Exam Lab are SUSPENDED during Exam!](https://legacy-community.ine.com/t/ewptxv2-exam-lab-are-suspended-during-exam/3514)

<div class="topic-metadata">

**Author:** [@carine.constant-75bd](https://legacy-community.ine.com/u/carine.constant-75bd)\
**Replies:** 0\
**Last updated:** [March 15, 2023, 12:28pm UTC](https://legacy-community.ine.com/t/ewptxv2-exam-lab-are-suspended-during-exam/3514 "2023-03-15T12:28:35Z")

</div>

Hi, In saturday, March 11, i starting eWPTXv2 Exam. Everythings works fine stil monday March 13 when i try reset lab environment and lab don’t start again. The status is freeazing in Starting and nothing work anymore!! …

---

## [Red-Teaming Active Directory - ELS.BANK](https://legacy-community.ine.com/t/red-teaming-active-directory-els-bank/3194)

<div class="topic-metadata">

**Author:** [@MushBrain](https://legacy-community.ine.com/u/MushBrain)\
**Replies:** 4\
**Last updated:** [December 29, 2022, 3:03pm UTC](https://legacy-community.ine.com/t/red-teaming-active-directory-els-bank/3194 "2022-12-29T15:03:37Z")

</div>

Hey @AlexisA There is something wrong with the labs when you restored them. None of the instructions match up to what is there. For example in Lab #2 it states to RDP to 172.16.80.100 but 172.16.80.100 is not configur…

---

## [Course files](https://legacy-community.ine.com/t/course-files/3173)

<div class="topic-metadata">

**Author:** [@shabanmahmoud92-7155](https://legacy-community.ine.com/u/shabanmahmoud92-7155)\
**Replies:** 0\
**Last updated:** [December 9, 2022, 12:17pm UTC](https://legacy-community.ine.com/t/course-files/3173 "2022-12-09T12:17:19Z")

</div>

course files not found , i need pdf

---

## [SQLi 2ndOrder Lab - PHP Error](https://legacy-community.ine.com/t/sqli-2ndorder-lab-php-error/2891)

<div class="topic-metadata">

**Author:** [@drZaius](https://legacy-community.ine.com/u/drZaius)\
**Replies:** 0\
**Last updated:** [September 20, 2022, 5:59am UTC](https://legacy-community.ine.com/t/sqli-2ndorder-lab-php-error/2891 "2022-09-20T05:59:54Z")

</div>

Hi there, I’m trying to solve the SQLi 2ndOrder Lab. In my .php-script I’m using “curl\_init”. However, when the function is being called, my Apache webserver returns a 500 Internal Server Error. In the error.log I’m gett…

---

## [Why does hacker.site is not being resolved in csrf labs?](https://legacy-community.ine.com/t/why-does-hacker-site-is-not-being-resolved-in-csrf-labs/1910)

<div class="topic-metadata">

**Author:** [@rsingh9430-8405dbea3](https://legacy-community.ine.com/u/rsingh9430-8405dbea3)\
**Replies:** 2\
**Last updated:** [June 18, 2022, 1:11am UTC](https://legacy-community.ine.com/t/why-does-hacker-site-is-not-being-resolved-in-csrf-labs/1910 "2022-06-18T01:11:22Z")

</div>

I would like to know why does hacker.site is not being resolved. on the other hand i can access by the ip address 10.100.13.33.

---

## [WAPTXv2 Exam Availability](https://legacy-community.ine.com/t/waptxv2-exam-availability/2430)

<div class="topic-metadata">

**Author:** [@janekwojewoda-e58efb](https://legacy-community.ine.com/u/janekwojewoda-e58efb)\
**Replies:** 0\
**Last updated:** [June 9, 2022, 7:32pm UTC](https://legacy-community.ine.com/t/waptxv2-exam-availability/2430 "2022-06-09T19:32:32Z")

</div>

Hi All, Currently we have a issue with lab maintenance on the INE portal. In next week I would like to start my WAPTXv2 exam, but I’m afraid that the exam labs are affected too. Please let me know If someone is doing WA…

---

## [Anybody taking Web Application Penetration Testing eXtreme (ewptxv2) ,want to join over discord?](https://legacy-community.ine.com/t/anybody-taking-web-application-penetration-testing-extreme-ewptxv2-want-to-join-over-discord/1928)

<div class="topic-metadata">

**Author:** [@rsingh9430-8405dbea3](https://legacy-community.ine.com/u/rsingh9430-8405dbea3)\
**Replies:** 0\
**Last updated:** [March 18, 2022, 10:17am UTC](https://legacy-community.ine.com/t/anybody-taking-web-application-penetration-testing-extreme-ewptxv2-want-to-join-over-discord/1928 "2022-03-18T10:17:46Z")

</div>

anybody interested can join over discord

---

## [More than 50% of WAPTX labs on my account have gone uder maintenence urgently need help](https://legacy-community.ine.com/t/more-than-50-of-waptx-labs-on-my-account-have-gone-uder-maintenence-urgently-need-help/1736)

<div class="topic-metadata">

**Author:** [@amr.hamza-50ef3ca54a](https://legacy-community.ine.com/u/amr.hamza-50ef3ca54a)\
**Replies:** 5\
**Last updated:** [February 15, 2022, 10:25pm UTC](https://legacy-community.ine.com/t/more-than-50-of-waptx-labs-on-my-account-have-gone-uder-maintenence-urgently-need-help/1736 "2022-02-15T22:25:47Z")

</div>

For three day till now i can’t open more than 50% of labs on my account because all have gone under maintenance and I am behind the schedule to finish my labs. Is there any solution for this issue ?

---

## [CSRF Labs - CORS](https://legacy-community.ine.com/t/csrf-labs-cors/1682)

<div class="topic-metadata">

**Author:** [@ribeirivinicius-fce2](https://legacy-community.ine.com/u/ribeirivinicius-fce2)\
**Replies:** 0\
**Last updated:** [January 28, 2022, 6:26pm UTC](https://legacy-community.ine.com/t/csrf-labs-cors/1682 "2022-01-28T18:26:36Z")

</div>

Hi guys, I’m just doing the CSRF labs, some of them require us to exploit the flaws with JS (I’m not talking about the XSS’s), I tested it in Chrome, and it doesn’t seen to work, cookies are not sent in cross domain requ…

---

## [XSS challenge WAPTX](https://legacy-community.ine.com/t/xss-challenge-waptx/1598)

<div class="topic-metadata">

**Author:** [@piyushkrp4444-231e4f](https://legacy-community.ine.com/u/piyushkrp4444-231e4f)\
**Replies:** 1\
**Last updated:** [January 15, 2022, 7:10pm UTC](https://legacy-community.ine.com/t/xss-challenge-waptx/1598 "2022-01-15T19:10:02Z")

</div>

Hi Team, I was trying to resolve the XSS lab of WAPTX but input is going to server i have tried to press enter it goes to next line instead of sending inputs to the server.

---

## [Java Insecure Deserialization scenario 2 - (Lab not running) issue](https://legacy-community.ine.com/t/java-insecure-deserialization-scenario-2-lab-not-running-issue/1410)

<div class="topic-metadata">

**Author:** [@ira\_chong-0e5aa198ca](https://legacy-community.ine.com/u/ira_chong-0e5aa198ca)\
**Replies:** 1\
**Last updated:** [December 8, 2021, 9:55am UTC](https://legacy-community.ine.com/t/java-insecure-deserialization-scenario-2-lab-not-running-issue/1410 "2021-12-08T09:55:42Z")

</div>

Hi Guys, I am having problem with starting Java Insecure Deserialization scenario 2. Even after click the start lab button, its says that the lab is not running. Anyone else encountered the same issue?

---

## [Download link for lab VM not found](https://legacy-community.ine.com/t/download-link-for-lab-vm-not-found/767)

<div class="topic-metadata">

**Author:** [@adam.nguyen-95ba4f70](https://legacy-community.ine.com/u/adam.nguyen-95ba4f70)\
**Replies:** 2\
**Last updated:** [December 4, 2021, 12:26am UTC](https://legacy-community.ine.com/t/download-link-for-lab-vm-not-found/767 "2021-12-04T00:26:12Z")

</div>

Hello, In the last two sections, Pentesting APIs & Cloud Applications and Attacking LDAP-based Implementations, there is a lab instruction file that says “This course section is accompanied by aVirtual Machine that you…

---

## [Red Teaming Active Directory Lab #2 Task 2 Constrained Delegation](https://legacy-community.ine.com/t/red-teaming-active-directory-lab-2-task-2-constrained-delegation/1175)

<div class="topic-metadata">

**Author:** [@captaindarkshad-e5ba](https://legacy-community.ine.com/u/captaindarkshad-e5ba)\
**Replies:** 5\
**Last updated:** [October 13, 2021, 4:10am UTC](https://legacy-community.ine.com/t/red-teaming-active-directory-lab-2-task-2-constrained-delegation/1175 "2021-10-13T04:10:22Z")

</div>

I am working on Constrained Delegation part of the lab and I have used rubeus to create the service ticket for http on dev01 with this command: This is asinine that I can only embed one image at a time I will reply w…

---

## [LAB 3 - Compromising DC problem](https://legacy-community.ine.com/t/lab-3-compromising-dc-problem/1187)

<div class="topic-metadata">

**Author:** [@Grain](https://legacy-community.ine.com/u/Grain)\
**Replies:** 0\
**Last updated:** [October 11, 2021, 9:44am UTC](https://legacy-community.ine.com/t/lab-3-compromising-dc-problem/1187 "2021-10-11T09:44:19Z")

</div>

Hello, I have encountered troubles with LAB 3. During writing this post I have found the solution to part of exercise (still posted it in case somebody had similar problems) but I have problem with last step of compro…

---

## [WAPTX XSS labs](https://legacy-community.ine.com/t/waptx-xss-labs/1079)

<div class="topic-metadata">

**Author:** [@cyberstudent198-1832](https://legacy-community.ine.com/u/cyberstudent198-1832)\
**Replies:** 0\
**Last updated:** [September 13, 2021, 1:25pm UTC](https://legacy-community.ine.com/t/waptx-xss-labs/1079 "2021-09-13T13:25:04Z")

</div>

I am working XSS labs which is a dynamic search page. For lab1, it stopped reflecting the input that i put into the search box and same is the issue with other XSS labs. AS a result, the payloads are not working. Has an…

---

## [Problem in the xss labs](https://legacy-community.ine.com/t/problem-in-the-xss-labs/915)

<div class="topic-metadata">

**Author:** [@aljohara.alqabb-1acf](https://legacy-community.ine.com/u/aljohara.alqabb-1acf)\
**Replies:** 3\
**Last updated:** [August 17, 2021, 1:58pm UTC](https://legacy-community.ine.com/t/problem-in-the-xss-labs/915 "2021-08-17T13:58:59Z")

</div>

when i type the script in the box (real time search) the box alert doesn’t appear even in the first lab i write simple script and i am sure it is right, i check the pop window block in the my browser and it is disabled

---

## [Http://info.xss.labs/ Inaccessible](https://legacy-community.ine.com/t/http-info-xss-labs-inaccessible/765)

<div class="topic-metadata">

**Author:** [@syedraza.abbas-1c83e](https://legacy-community.ine.com/u/syedraza.abbas-1c83e)\
**Replies:** 3\
**Last updated:** [July 13, 2021, 11:11am UTC](https://legacy-community.ine.com/t/http-info-xss-labs-inaccessible/765 "2021-07-13T11:11:01Z")

</div>

While doing the Lab 1: XSS labs in the description it was written " The solution files are available at http://info.xss.labs/solutions ." However I cant access the solution file. Can anyone please share the solution f…
