See the working demo ↓A screenshot — the working demo is belowEnrolment opening soon
HTTP and web traffic analysis
Understand what really happens between a click and the application's response. Learn to read and modify HTTP requests, recognize the role of headers and diagnose permission, cache, CORS and retry issues.
PLN 349planned price including tax
In your browser · No installation · Tutor and narration
Look inside
Demo: course excerpt
Full course: HTTP under the microscope
We will notify you when the full course launches. No obligation to buy.
The figures describe the full course's English-language source materials. The demo is available in Polish and English. Input examples belong to the reference library. They are not additional completed exercises.
See a GET request and response in the Network panel. The demo also includes a four-step Sandbox case with a duplicate Host header. Other chapters are not included here.
A selected excerpt of an upcoming course in its original layout and exercise environment. The demo does not cover the entire course or mean that sales are open.
Open your browser. Start learning.
Do not spend your first evening configuring an environment. The application, tools and task context are in one place. You do not need Docker, a VPN, a virtual machine or paid software.
A virtual tutor walks you through the example and highlights important parts of the application, code or tool. Connect the instruction to what is happening on screen.
Narration explains the mechanism, decision and result. Pause the guidance, return to an earlier step and work through it at your own pace.
Take over in the exercise: change data, run a test or make a decision. Compare the result and improve your solution using the explanation.
One environment, without switching between a video and a local installation. Tools fit the topic: from HTTP requests and code to a terminal, calculator or document. Practice in simulators and prepared cases, without attacking other people's systems.
What will you be able to do?
Network stops being a list of puzzling entries. Learn to ask a question and find its answer in a specific request and response.
You see headers and a status but do not know what matters.
Identify user-controlled data and the response element that confirms the operation.
You copy someone else's request without knowing what to change.
Compare baseline and modified requests. Explain whether the difference came from permissions, caching, the method or browser context.
After a configuration change, you only check whether the error disappears.
Prepare a negative test and a legitimate write, read or retry. Justify the expected outcome of both tests.
Use this analysis when testing APIs, diagnosing integrations and explaining to the team which layer changed the result.
Connect each skill to a concrete work product. Return to explanations while you practice.
A syllabus backed by materials
See what makes up the syllabus: lessons, explanations, examples and exercises. The figures below describe different types of materials.
The figures describe the English-language source materials. The waiting list is for the planned Polish edition. These counts do not mean its translation is complete. Demonstration steps, examples and tasks are different units, not hours of video or counts of unique vulnerabilities.
Entry point
Available in Polish and English — you can switch language at any time. Command names, code snippets and standard identifiers remain in their original form.
How you learn
The tutor walks through an example and explains each decision. In the exercise, return to the context, check the result and improve your answer.
Goal, constraints and inputs. Know what you are testing and why.
Watch a demonstration with tutor commentary, step by step.
Work with data, a tool or a scenario. Compare the result with your expectation.
Justify your decision and understand its limitations. Return to anything that needs improvement.
Exercises use simulators and selected mechanisms that run in the browser. They do not require attacking other people's systems.
Planned syllabus
Each area develops a specific skill. Learn not only the topic but also the action and outcome that learning leads to.
Each topic includes a skill and a concrete exercise outcome.
I want to join the listBreak a message down into method, URL, parameters, headers and body. Trace the response and request identifier to connect what was sent to its result. Start with a normal transaction as your baseline for comparison.
Tutor-guided exercise
Compare OPTIONS declarations with actual method handling, including header-based method overrides. Read 200, 401, 403 and 404 alongside the response body and user identity. Check which control actually decided access.
Tutor-guided exercise
Determine who sets a header and whether the application can trust it. Compare content types, compression, length, Range requests and message boundaries. See why a different response size does not always mean different data.
Tutor-guided exercise
Read an authentication challenge and test requests without login details and with valid credentials. Connect the authentication scheme, response and operation cost to the test's purpose.
Tutor-guided exercise
Test what happens when a write is retried or an outdated data version is submitted. Practice ETag, If-Match and idempotency keys. Compare allowed, rejected and accidentally duplicated updates.
Tutor-guided exercise
Trace the cache key, retention time and headers that affect response selection. In cache poisoning and private-page misclassification cases, check who receives the stored content. Analyze the redirect chain, not just the final URL.
Tutor-guided exercise
Compare Origin, preflight and credentialed requests. Distinguish sending a request from a script's permission to read the response. Prepare tests from allowed and unrelated sites so the fix preserves the required integration.
Tutor-guided exercise
Trace multipart, MIME types and request-body boundaries. Compare how an intermediary and application interpret an ambiguous message, and discuss HTTP version differences. Parser discrepancy cases are analyzed in a controlled environment.
Case analysis
Test how Host and proxy-forwarded headers influence a password reset link or recipient selection. In an SSRF example, distinguish a connection attempt from confirmed resource access. Identify the trust boundary that needs improvement.
Tutor-guided exercise
Record the request, response and expected behavior change after remediation. Remove unnecessary data from the report copy, and repeat the original test alongside legitimate feature use. Produce a scenario someone else can reproduce without guessing the context.
Workshop with prepared data
In practice
Each case has context, a concrete action and an outcome. The goal is not to memorize a command but to understand why the result changed.
Compare writes with current and stale ETags and a version missing the required condition. Check retries and how the server recognizes the same user intent.
Work productA set of requests with expected update and retry behavior.
Trace how the cache key and path interpretation affect response storage and recipients. Compare baseline and modified requests and requests in another user's context.
Work productAn explanation of the cache flaw and a test after changing storage rules.
Certificate of completion
When you complete the course, the certificate is issued automatically and emailed to you. It shows your name, the date of issue and a unique code, and its second page lists the course scope.
Code verification: cyberszkola.pl/verify
Upcoming standalone course
Planned course price
Polish edition · Launch date not yet announced
Notify me at launchJoining is free. Before sales open, you will receive the date, full scope and purchase terms. We are not taking payments today. This is a separate interest list, not a place reservation or purchase.
For companies and teams
Compatible with LMS platforms including:
and other platforms that support e-learning standards.
Price for companies
Delivery into your company's own LMS from 50 licences.
Ask for a quoteWrite to kontakt@cyberszkola.pl: the number of people, the courses you want and your LMS, if you use one.
Project author
Creator of Cyberwiedza, cyberszkola and AI SecLabs. In these courses, I connect explanations of mechanisms with practice, observation and decisions you need to justify.
Running a command is not enough. What matters is what its output confirms, what it does not confirm and what the next step should be.
More about the authorBefore joining
No. Learn to recognize which headers matter for a particular question and check their effects. Comparing requests and responses correctly matters more than memorizing a list.
Yes. HTTP methods, status codes, authentication, conditional updates and request retries also apply to APIs. The CORS and browser-state material also explains the restrictions that apply to browser-based clients.
No. This is an upcoming course announcement and an interest list. Joining is not a purchase, a place reservation or a commitment to pay.
The launch date, price and access terms will be announced before sales open. The interest list is how we send that information.
The course is available in Polish and in English — you can switch language at any time, and lessons, exercise explanations and narration exist in both. Commands, code and tool names keep their original syntax, as used in everyday work.
No. All course exercises run in your browser on a computer with internet access. Training applications, terminals, editors and workshops are part of the platform. You do not install Docker, a virtual machine or a VPN, and you do not need paid external tools.
No. You work in an interactive environment. A virtual tutor highlights important elements, and narration explains the action and its result. Pause the lesson, return to earlier steps and run your own experiments. This guidance is built into the course, not individual consultation with a person.
No. You use training applications, simulators and prepared data. Learn the mechanism and its limitations in a safe environment. External resources are supplementary, not required to complete the exercises.
Yes, a certificate of completion. When you complete the course, you receive a certificate in English with a unique code that anyone can check at cyberszkola.pl/verify. It confirms completion of the course and is issued by the author; it is not an industry certification. We do not promise employment.
No. These are independently authored courses using public references and original cases. They do not replace licensed standards, accreditation or qualifications required in regulated industries.
Join the waitlist
Leave your email address. We will send you news of enrollment, the syllabus and first-edition terms. You will not need to keep checking this page.
Planned price: PLN 349 including tax