Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
|
Recon 25
In this challenge, you need to look for a file named key2.txt in the place used to serve the assets for the main website
|
1-2 Hr. | 3303 | FREE | |
|
|
Recon 26
In this challenge, you need to look for a key in the JavaScript used by the website
|
< 1 Hr. | 5137 | FREE | |
|
|
Recon 24
In this challenge, you need to look for a file named key.txt in the place used to serve the assets for the main website
|
< 1 Hr. | 5433 | FREE | |
|
|
Recon 22
In this challenge, you need to look in repo9 for deleted files
|
< 1 Hr. | 5137 | FREE | |
|
|
Recon 21
In this challenge, you need to look at the information in the branches for repo4
|
< 1 Hr. | 5341 | FREE | |
|
|
Recon 20
In this challenge, you need to look at the branches in repo3
|
< 1 Hr. | 5469 | FREE | |
|
|
Recon 23
In this challenge, you need to look for sensitive information in commit messages
|
< 1 Hr. | 5117 | FREE | |
|
|
Recon 19
In this challenge, you need to look at the email addresses used for commits in the repository repo7
|
< 1 Hr. | 5179 | FREE | |
|
|
Recon 18
In this challenge, you need to look at the public repository of the developers in the organisation
|
< 1 Hr. | 5498 | FREE | |
|
|
Recon 17
In this challenge, you need to look at the name of the developer used in the repository test1
|
< 1 Hr. | 5810 | FREE | |
|
|
Recon 15
In this challenge, you need to find a TXT record by doing a zone transfer on the internal zone "int"
|
< 1 Hr. | 5548 | FREE | |
|
|
Recon 16
In this challenge, you need to find the version of Bind used
|
< 1 Hr. | 5712 | FREE | |
|
|
Recon 13
In this challenge, you need to find the TXT record linked to key.z.hackycorp.com
|
< 1 Hr. | 6790 | FREE | |
|
|
Recon 14
In this challenge, you need to find a TXT record by doing a zone transfer on z.hackycorp.com
|
< 1 Hr. | 6099 | FREE | |
|
|
Recon 11 | < 1 Hr. | 6207 | FREE | |
|
|
Recon 12 | < 1 Hr. | 6771 | FREE | |
|
|
Recon 07
This exercise covers default TLS vhost
|
< 1 Hr. | 10989 | FREE | |
|
|
Recon 06
This exercise covers default vhost
|
< 1 Hr. | 12089 | FREE | |
|
|
Recon 09 | < 1 Hr. | 10611 | FREE | |
|
|
Recon 08
This exercise covers aliases in TLS certificates
|
< 1 Hr. | 9971 | FREE | |
|
|
Recon 04
This exercise covers common interesting directories
|
< 1 Hr. | 16940 | FREE | |
|
|
Recon 05
This exercise covers simple directory bruteforcing
|
< 1 Hr. | 12369 | FREE | |
|
|
Recon 01
This exercise covers 404 error pages
|
< 1 Hr. | 22219 | FREE | |
|
|
Recon 10
This exercise covers visual content discovery
|
< 1 Hr. | 6779 | FREE | |
|
|
Recon 00
This exercise covers the robots.txt file
|
< 1 Hr. | 22214 | FREE | |
|
|
Recon 02
This exercise covers the security.txt file
|
< 1 Hr. | 18739 | FREE | |
|
|
Recon 03
This exercise covers directory listing
|
< 1 Hr. | 16793 | FREE | |
|
|
CVE-2018-10933: LibSSH auth bypass
This exercise covers how to bypass authentication on an SSH server based on libssh to gain a shell on the affected system
|
-- | 0 | FREE | |
|
|
Introduction to code review
This exercise covers the different ways to perform code review. It also contains a simple application to review to help you get started.
|
-- | 0 | FREE | |
|
|
S2-052
This exercise covers the exploitation of the Struts S2-052 vulnerability
|
< 1 Hr. | 2601 | FREE |
Showing 1–30 of 51 exercises
Free Labs of the Month