Exercises
| Exercise | Avg. Time | Difficulty | Solved by | Tier | |
|---|---|---|---|---|---|
|
|
Recon 25
In this challenge, you need to look for a file named key2.txt in the place used to serve the assets for the main website
|
1-2 Hr. | 3314 | FREE | |
|
|
Recon 26
In this challenge, you need to look for a key in the JavaScript used by the website
|
< 1 Hr. | 5156 | FREE | |
|
|
Recon 24
In this challenge, you need to look for a file named key.txt in the place used to serve the assets for the main website
|
< 1 Hr. | 5452 | FREE | |
|
|
Recon 22
In this challenge, you need to look in repo9 for deleted files
|
< 1 Hr. | 5153 | FREE | |
|
|
Recon 21
In this challenge, you need to look at the information in the branches for repo4
|
< 1 Hr. | 5357 | FREE | |
|
|
Recon 20
In this challenge, you need to look at the branches in repo3
|
< 1 Hr. | 5485 | FREE | |
|
|
Recon 23
In this challenge, you need to look for sensitive information in commit messages
|
< 1 Hr. | 5133 | FREE | |
|
|
Recon 19
In this challenge, you need to look at the email addresses used for commits in the repository repo7
|
< 1 Hr. | 5195 | FREE | |
|
|
Recon 18
In this challenge, you need to look at the public repository of the developers in the organisation
|
< 1 Hr. | 5514 | FREE | |
|
|
Recon 17
In this challenge, you need to look at the name of the developer used in the repository test1
|
< 1 Hr. | 5827 | FREE | |
|
|
Recon 15
In this challenge, you need to find a TXT record by doing a zone transfer on the internal zone "int"
|
< 1 Hr. | 5570 | FREE | |
|
|
Recon 16
In this challenge, you need to find the version of Bind used
|
< 1 Hr. | 5731 | FREE | |
|
|
Recon 13
In this challenge, you need to find the TXT record linked to key.z.hackycorp.com
|
< 1 Hr. | 6811 | FREE | |
|
|
Recon 14
In this challenge, you need to find a TXT record by doing a zone transfer on z.hackycorp.com
|
< 1 Hr. | 6119 | FREE | |
|
|
Recon 11 | < 1 Hr. | 6232 | FREE | |
|
|
Recon 12 | < 1 Hr. | 6792 | FREE | |
|
|
Recon 07
This exercise covers default TLS vhost
|
< 1 Hr. | 11035 | FREE | |
|
|
Recon 06
This exercise covers default vhost
|
< 1 Hr. | 12143 | FREE | |
|
|
Recon 09 | < 1 Hr. | 10651 | FREE | |
|
|
Recon 08
This exercise covers aliases in TLS certificates
|
< 1 Hr. | 10014 | FREE | |
|
|
Recon 04
This exercise covers common interesting directories
|
< 1 Hr. | 17018 | FREE | |
|
|
Recon 05
This exercise covers simple directory bruteforcing
|
< 1 Hr. | 12427 | FREE | |
|
|
Recon 01
This exercise covers 404 error pages
|
< 1 Hr. | 22328 | FREE | |
|
|
Recon 10
This exercise covers visual content discovery
|
< 1 Hr. | 6801 | FREE | |
|
|
Recon 00
This exercise covers the robots.txt file
|
< 1 Hr. | 22322 | FREE | |
|
|
Recon 02
This exercise covers the security.txt file
|
< 1 Hr. | 18830 | FREE | |
|
|
Recon 03
This exercise covers directory listing
|
< 1 Hr. | 16870 | FREE | |
|
|
CVE-2018-10933: LibSSH auth bypass
This exercise covers how to bypass authentication on an SSH server based on libssh to gain a shell on the affected system
|
-- | 0 | FREE | |
|
|
Introduction to code review
This exercise covers the different ways to perform code review. It also contains a simple application to review to help you get started.
|
-- | 0 | FREE | |
|
|
S2-052
This exercise covers the exploitation of the Struts S2-052 vulnerability
|
< 1 Hr. | 2603 | FREE |
Showing 1–30 of 51 exercises
Free Labs of the Month