Commands and requests
Use the API practice console for target API routes. Run operating system commands in the companion VM or dedicated lab worker.
Expected evidence
CHECK YOUR UNDERSTANDING
ORIGINAL CYBERHELP PROGRAMME
Advanced Web
& API VAPT
Learn to test an application, explain the evidence, and verify the fix.
A chapter-by-chapter programme for learners with basic Linux, networking and HTTP knowledge. Read a focused lesson, work through a synthetic target, then prove your understanding.
First class available to preview. A free account saves checkpoints.
THE PRACTICE
- 01Understand the boundary
Identify the actor, object and action before the test.
- 02Produce real evidence
Send requests to your own synthetic API target.
- 03Defend the conclusion
Pass a checkpoint and verify the patched behaviour.
12classes
48lessons
6lab checks
YOUR WORKSPACE
Continue your learning
THE CURRICULUM
A clear route through the work
The course outline is loading.
API practice, with clear boundaries
The built-in console performs real application operations against per-account synthetic data. Run Linux and network commands in the companion VM or an approved dedicated lab worker. This browser console does not provide an operating system shell.
The AI tutor connection is pending. Available hints are authored learning material.
Loading this lesson…
FULL COURSE ACCESS
Continue beyond the preview
This lesson requires approved enrolment. The first class remains available to explore.
Lesson permissions are enforced by the server.
YOUR SYNTHETIC TARGET
API practice console
Send a request to the training application. Target accounts and target bearer tokens are separate from your Academy sign-in.
Target response
No request yetYour target response will appear here after you send a request.
Bearer tokens are redacted in this response view. Keep credentials out of shared evidence.
Verify your lab evidence
The server checks the actions recorded in your target.
No lab checks verified yet.
CONTINUE WITH CYBERHELP
Request full course access
Explore the first class, then request enrolment for the complete 12-class programme.
An administrator reviews access requests. Payments are not connected and nothing is charged here.
ADMINISTRATION