At SANS In-depth Web Penetration Testing course, day 1 of 4