Skip to main content

Web & Networking Foundations · OWASP WSTG - Information Gathering

Reading a Connection: URL, Port, and Certificate Inspection

A custom-page synthesis exercise — parse a URL, trace simulated DNS and TCP layers, inspect TLS state, and judge certificate scenarios.

Before we begin, here is exactly what you will be able to do by the end of this lesson.

By the end of this lesson, you will be able to:

  • Parse a URL into its scheme, host, port, and path components, and state the default port for each scheme.
  • Trace the full connection path for an HTTPS request in order: DNS resolves the hostname → TCP opens the connection to the port → TLS secures and authenticates the channel → HTTP carries the application exchange.
  • Distinguish between an implicit scheme-default port and an explicitly stated non-default port in a URL.
  • Read the custom Certificate Read panel for the issuer, validity dates, covered hostnames, and trust-chain details.
  • Explain why a valid TLS certificate and padlock do not guarantee the application behind them is secure.

When you are ready, send Continue.