Web Networking, HTTP & Automation
Learn what happens between a URL and a response, inspect it in browser DevTools, debug it with professional tools, and automate reliable web workflows. Twenty units with practical labs, from packets and TLS to APIs, browser automation, and responsible data extraction.
Networking foundations
Follow a request from frames and addresses through DNS, transport, TLS, and HTTPS.
Map the course, set up a safe lab, define authorisation, and learn to preserve useful evidence without leaking secrets.
Connect OSI and TCP/IP models to bytes on a wire, Ethernet frames, ARP, MTU, bandwidth, latency, and loss.
Read IPv4 and IPv6 addresses, reason about subnets and routes, and follow traffic through gateways, NAT, and firewalls.
Trace recursive and authoritative DNS, inspect records and caching, and diagnose common resolution failures.
Understand handshakes, streams, datagrams, ports, socket state, retransmission, flow control, and timeouts.
Follow a TLS handshake, validate certificate chains and hostnames, understand SNI and ALPN, and debug HTTPS safely.
HTTP in depth
Master requests, responses, state, authentication, caching, proxies, and protocol versions.
Construct requests deliberately: URL components, methods, query strings, headers, body encodings, redirects, and idempotency.
Interpret response status, headers, bodies, content negotiation, compression, streaming, and error contracts.
Work with HTTP metadata and state while handling cookies, credentials, API keys, Basic, bearer tokens, OAuth, and CSRF safely.
Reason about freshness and validators, forward and reverse proxies, CDNs, HTTP/1.1, HTTP/2, HTTP/3, and WebTransport.
Browser laboratory
Investigate real behavior with the Console, Network panel, Fetch API, and browser security boundaries.
Use the browser as an HTTP workbench: console, fetch, promises, JSON, DOM inspection, copy-as-code, and safe experiments.
Read request details, initiators, timing waterfalls, cache behavior, throttling, HAR files, WebSockets, and service-worker effects.
Understand origins, preflights, credentials, CSP, mixed content, cookie policy, storage, service workers, and why browsers block requests.
Professional tools
Reproduce and inspect traffic with CLI clients, API workbenches, proxies, debuggers, and packet capture.
Reproduce requests outside the browser, inspect redirects and TLS, upload files, preserve sessions, and produce repeatable command-line evidence.
Use Postman, Insomnia, Bruno, and Hoppscotch; read OpenAPI; test REST, GraphQL, webhooks, SSE, and WebSockets.
Choose and safely operate Burp Suite, OWASP ZAP, mitmproxy, Fiddler, Charles, Proxyman, HTTP Toolkit, Wireshark, tcpdump, and related tools.
Automation & extraction
Build reliable Python, Node.js, browser, and responsible data-extraction workflows.
Build maintainable clients with requests and HTTPX: sessions, timeouts, retries, pagination, streaming, validation, concurrency, and tests.
Automate with fetch and Undici, parse HTML, and use Playwright, Puppeteer, or Selenium when a real browser is genuinely required.
Design resilient extraction around permission, APIs, robots directives, rate limits, semantic parsing, deduplication, provenance, and change detection.
Production capstone
Ship an observable, bounded automation with tests, failure policy, telemetry, and an operator runbook.
Ship an observable automation: explicit contract, redacted logs, metrics, traces, tests, replay fixtures, failure policy, and an operator runbook.
Reference, always open beside you
- Snippetsfree to read
Copy-paste-ready code, one file per snippet.
- Cheatsheetsfree to read
Single-page quick reference cards.
- Worked examplesfree to read
Full end-to-end crack walkthroughs.
- Checklistsfree to read
Workflows and pre-flight lists.
- Referencefree to read
Everything the units cross-link into.