Skip to content

Latest commit

 

History

History
62 lines (43 loc) · 2.98 KB

File metadata and controls

62 lines (43 loc) · 2.98 KB

Rooms: How The Web Works

Room 1: DNS in Detail

Room URL: https://tryhackme.com/room/dnsindetail

Description: This room provides an in-depth look at the Domain Name System (DNS) — the Internet's phonebook that translates human-readable domain names into machine-readable IP addresses. Students learn about the hierarchical DNS structure (root, TLD, second-level, subdomain), DNS record types (A, AAAA, CNAME, MX, TXT, NS), and the step-by-step resolution process. The room also covers practical DNS lookup commands and common attack vectors like DNS spoofing and DNS tunnelling.

Key Topics:

  • DNS hierarchy and architecture
  • DNS record types and purposes
  • Resolution flow (recursive vs authoritative)
  • Practical DNS commands (nslookup, dig, host)
  • DNS attack vectors

Room 2: HTTP in Detail

Room URL: https://tryhackme.com/room/httpindetail

Description: This room covers the Hypertext Transfer Protocol (HTTP) in depth — the foundation protocol for web communication. Students learn about HTTP request methods (GET, POST, PUT, PATCH, DELETE), response status codes (1xx-5xx), request and response headers, and the difference between HTTP and HTTPS. The room includes practical exercises using curl to construct and analyse HTTP requests, building a hands-on understanding of web protocol mechanics.

Key Topics:

  • HTTP request methods
  • HTTP response status codes
  • Request and response headers
  • HTTP vs HTTPS
  • Practical curl usage

Room 3: How Websites Work

Room URL: https://tryhackme.com/room/howwebsiteswork

Description: This room explains the three core technologies that power websites: HTML for structure, CSS for presentation, and JavaScript for interactivity. Students learn how these technologies combine to create the web pages they interact with daily. The room covers HTML elements and attributes, CSS selectors and styling, and JavaScript's role in dynamic content and DOM manipulation. Security considerations include the risk of exposing sensitive information in HTML comments and the dangers of client-side trust.

Key Topics:

  • HTML structure and elements
  • CSS styling and layout
  • JavaScript and DOM manipulation
  • Browser developer tools (DevTools)
  • Web security considerations

Room 4: Putting It All Together

Room URL: https://tryhackme.com/room/puttingitalltogether

Description: This room synthesises all the web technologies covered in the module by tracing the complete lifecycle of a web request. From the moment a user types a URL into their browser, through DNS resolution, TCP handshake, TLS negotiation, HTTP request/response, and finally browser rendering — every step is explained in detail. Students gain a holistic understanding of how the web works end-to-end.

Key Topics:

  • Complete request lifecycle
  • URL entry and parsing
  • DNS resolution step-by-step
  • TCP three-way handshake
  • TLS handshake (HTTPS)
  • HTTP request assembly and transmission
  • Server processing and response generation
  • Browser rendering pipeline