Cybersecurity · hands-on lab
CEH Lab 07: Web Application Testing
Find a command-injection flaw in an authorised practice app, prove it safely, and describe the fix.
- 45 minutesTime in the lab
- advancedLevel
- 4 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Phase — Web application testing. target runs a tiny in-house "ping tool" web page built for this lab. It takes a hostname and runs ping — carelessly. Find the injection, prove it reads a file it should not, and write how the developer must fix it (input validation).
What you will do
- Use the tool normally
- Prove the command injection
- Record the flag
- What is the correct fix?question
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.