Web Application Attack methodologies

Level one:  Notice how this page behaves differently when you send requests using different HTTP methods. Enter the password to advance to the next level.

Level Two: This time you'll have to specify some HTTP headers in order to get the password for this level. *X- Authorization- Date= The current date in YYYY-MM-DD format* X-Sessiuon-Id=Your Session ID* X-Signature-AllComp = Create a 'sha1' HMAC using the above two header values

Level Three: This time you'll need to script out a program which uses the same headers from the previous challenge to request this page several times. Your script should analyze the response for differences and identify which request produced the password.

- Document your testing methodology for each challenge

- include 1 to 3 screenshots

- final documentation should be in pdf format

-challenge 3 required you to write a script in the language of your choosing