Four tiny demos — one for each thing we covered. This is a playground, not your classwork. Poke at it while I show you.
Catch a request in flight, change it, resend it.
The site trusts a cookie. What if we change it?
A box that runs your input on the server.
Tool for all of it: Burp — Proxy, Intercept, Repeater.