Recon Badge

Pentesterlab's Recon exercises, available in the free tier, help you learn how to gather information about a target before attacking it. You'll use tools to find details about websites, domains, and networks. These exercises teach you how to collect data to help you plan your next steps in a penetration test.

View the exercises here: PentesterLab: Learn with our Recon Badge

Scope

For this exercise, the current targets are:

• hackycorp.com

• .hackycorp.com

• 0x[%02x].a.hackycorp.com(find the red key)

• balancer.hackycorp.com

• z.hackycorp.com (DNS-related challenges)

• Github account for Hackycorp

Exercise Solutions

recon_00

/robots.txt

recon_01

404 pages

recon_02

/.well-known/security.txt

recon_03

directory listing

recon_04

/admin

recon_05

wfuzz

recon_06

vhost

recon_07

vhost over TLS

recon_08

alt name

recon_09

header

recon_10

visual recon

recon_11

virtual host brute

recon_12

load balance

recon_13

TXT

recon_14

zone transfer

recon_15

int zone transfer

recon_16

bind version

recon_17

dev name

recon_18

public repos

recon_19

find email

recon_20

check branches 1

recon_21

check branches 2

recon_22

deleted file

recon_23

commit message

recon_24

assets

recon_25

S3

recon_26

JS