TL;DR

This post is about my learning experience in the Live Bug Hunt session. The goal was to find hidden URLs to images of ten TesBash bosses. It was fun!

This session was at 1.00 on Friday morning, and for me it was bedtime. But I squizzed a little more of mental energy.

Context

We got three application instances. Same independent applications on different URL’s. What you tried in one instance, did not change anything in another two. The database was reset every five minutes. Reset is data deletion.

The Bug Hunt

We watched a live bug session with Jhoanna, Mark, and Neil. The exploratory session duration was 30 minutes with the charter, let’s find out TestBash bosses images. That was an example of session-based test management for the TestBash Home audience. Neil was immediately in Chrome developer tools and found Rosy in the Inspect elements tab. Soon he moved to Postman and started investigating rest API.

I also did my hunt. My charter was to do the feature tour. When you first hit the application, there were instructions (only the first time, that was cookie-related). I found out that there is an admin part of the application. Usernames and passwords were also provided.

The application was a simple Airbnb clone. After room management feature, I found HTML comment on the application home page that looked like an old school ASCII art. But it did not reassemble any of the bosses.

Then one another boss image was revealed by changing Browser size. I also noticed that Mark, author of bug hunt application, had the monitor with a much bigger resolution than my 15 inch Mac retina display. So I tried to change the resolution of ASCII art. Changing Browser window size did not help, because it was ASCII art that was not part of HTML. Zoom out revealed above Mark’s image! My hunt was done for today.