Pyramitech - Session 4.2 Defensive Security Task

Task: Defensive Security & Network Traffic Inspection

Web applications send and receive data across the network during user login. Security engineers inspect web traffic using browser DevTools to ensure sensitive credentials are never exposed in plain text.

Mission Briefing

You have been given valid login credentials. Your job is to investigate what happens when you log in.

Open Developer Tools by pressing F12 (or Right-click → Inspect) and switch to the Network tab.
Enter the provided username and password into the login portal below.
Click the Login button.
Watch the Network tab for the login HTTP request to appear.
Click on the login request to inspect the Request URL, HTTP Method, and Payload/Query Parameters.
Identify the security mistake being made during transmission.

Provided Login Credentials

Use the credentials below to log in:

Username student@pyramitech.local

Password Student123!

Student Portal Login

Username / Email

Password

Welcome, Student! Login successful.

YOUR MISSION: Security Observations

Inspect your browser's F12 Network tab during login and reflect on the following observations:

1

What HTTP method is used by the login request?
2

Where can you see the username?
3

Where can you see the password?
4

Is exposing a password in the URL a good practice?
5

What should normally be used to protect login traffic?
6

Why should developers use HTTPS?

Submit Completion Flag

Enter the completion flag discovered from the task:

SECURITY CHECK COMPLETE!

Awesome investigation! Here is your official proof of completion to send to your instructor in Google Meet chat:

PYRA-42-DEFENSIVE-SECURE-9842X