Testing Whether Sign-Out Ends Access is a hands-on Kali Linux project for beginners learning authorized web security assessment. Fieldwork Studio needs to know whether its member sign-out actually ends access to a booking page and its downloadable CSV while preserving other legitimate use.
Two guided labs take you from a normal booking workflow to retaining original requests in Burp Repeater, testing an old session after sign-out, and checking an independent browser. One independent challenge changes the member, deployment and resource outcomes. Each unit starts in a separately prepared environment. Your handoff contains private original request/response evidence and a password-free acceptance decision supported by real session behavior.
What You Will Learn
By the end of this course, you will be able to:
- establish the normal member workflow and respect a precise authorized scope;
- capture successful booking requests and retain their original session cookies in Burp Repeater;
- distinguish a browser returning to its sign-in page from the server rejecting an old session;
- test both a protected page and a download after the same session's sign-out;
- confirm that an independent existing session and a fresh sign-in still work when required;
- deliver private Burp XML evidence and a clear decision without copying credentials into the report.
Who This Course Is For
This course is for Kali Linux beginners who want to turn a small web security test into an evidence-supported assessment.
Prerequisites: Basic terminal input, recognizing file paths and switching browser tabs. HTTP responses, cookies, sessions, Burp Repeater and the required shell commands are explained before use. Follow the units in order; the second guided lab and challenge build on the first lab's methods.
Practice environment: LabEx provides prepared Auditor, Burp, Browser A and Browser B Interfaces with a controlled member site. The identities and booking data are synthetic; HTTP authentication, session cookies, sign-out, downloads and Burp replay are real. The two browsers use independent profiles. Documents are available in nine languages; the running application, tool labels, commands and output remain English.
Frequently Asked Questions
Do I need to install Kali or Burp Suite?
No. The browser-based practice environment includes Kali, Burp Suite Community and the controlled website. The guided instructions explain how to start the prepared temporary Burp project.
Do I need web development or programming experience?
No. You assess the supplied application using its normal forms, Burp and a few explained terminal commands. You do not rewrite the server or guess credentials.
Does a sign-in page prove that sign-out worked?
No. You retain a previously successful request and resend it with its original cookie after that session's sign-out. You inspect the actual response and verify normal access boundaries before making a decision.
How does the challenge extend the guided labs?
It provides a new member and deployment, with resource outcomes you must evaluate independently. You reuse the taught capture, replay, independent-browser and evidence-handling methods to judge whether the stated sign-out contract is satisfied.
