Exercises

Exercise Avg. Time Difficulty Solved by Tier
Recon 25
In this challenge, you need to look for a file named key2.txt in the place used to serve the assets for the main website
1-2 Hr. easy 3216 FREE
Recon 23
In this challenge, you need to look for sensitive information in commit messages
< 1 Hr. easy 4975 FREE
Recon 21
In this challenge, you need to look at the information in the branches for repo4
< 1 Hr. easy 5194 FREE
Recon 20
In this challenge, you need to look at the branches in repo3
< 1 Hr. easy 5316 FREE
Recon 15
In this challenge, you need to find a TXT record by doing a zone transfer on the internal zone "int"
< 1 Hr. easy 5400 FREE
Recon 14
In this challenge, you need to find a TXT record by doing a zone transfer on z.hackycorp.com
< 1 Hr. easy 5933 FREE
Recon 13
In this challenge, you need to find the TXT record linked to key.z.hackycorp.com
< 1 Hr. easy 6617 FREE
Recon 12
< 1 Hr. easy 6592 FREE
Recon 11
< 1 Hr. easy 6035 FREE
Recon 09
< 1 Hr. easy 10321 FREE
Recon 07
This exercise covers default TLS vhost
< 1 Hr. easy 10681 FREE
Recon 06
This exercise covers default vhost
< 1 Hr. easy 11758 FREE
Recon 03
This exercise covers directory listing
< 1 Hr. easy 16265 FREE
Recon 02
This exercise covers the security.txt file
< 1 Hr. easy 18124 FREE
Recon 00
This exercise covers the robots.txt file
< 1 Hr. easy 21503 FREE
Introduction to code review
This exercise covers the different ways to perform code review. It also contains a simple application to review to help you get started.
-- easy 0 FREE
S2-052
This exercise covers the exploitation of the Struts S2-052 vulnerability
< 1 Hr. easy 2582 FREE
CVE-2014-6271/Shellshock
This exercise covers the exploitation of a Bash vulnerability through a CGI.
< 1 Hr. easy 9066 FREE
Web for Pentester II
This exercise is a set of the most common web vulnerabilities.
-- easy 0 FREE
Web for Pentester
This exercise is a set of the most common web vulnerabilities.
-- easy 0 FREE
Showing 1–20 of 20 exercises