Marial's Notes
  • Hello!
  • Pentesterlab Labs
    • Recon Badge
      • recon_00 (/robots.txt)
      • recon_01 (404 pages)
      • recon_02 (/.well-known/security.txt)
      • recon_03 (directory listing)
      • recon_04 (/admin)
      • recon_05 (wfuzz)
      • recon_06 (vhost)
      • recon_07 (vhost over TLS)
      • recon_08 (alt name)
      • recon_09 (header)
      • recon_10 (visual recon)
      • recon_11 (virtual host brute)
      • recon_12 (load balance)
      • recon_13 (TXT)
      • recon_14 (zone transfer)
      • recon_15 (int zone transfer)
      • recon_16 (bind version)
      • recon_17 (dev name)
      • recon_18 (public repos)
      • recon_19 (find email)
      • recon_20 (check branches 1)
      • recon_21 (check branches 2)
      • recon_22 (deleted file)
      • recon_23 (commit message)
      • recon_24 (assets)
      • recon_25 (S3)
      • recon_26 (JS)
  • TryHackMe Rooms
    • Basic Pentesting
    • EasyPeasy
    • Kenobi
    • Vulnversity
Powered by GitBook
On this page

Was this helpful?

  1. Pentesterlab Labs

Recon Badge

PreviousHello!Nextrecon_00 (/robots.txt)

Last updated 7 months ago

Was this helpful?

Pentesterlab's Recon exercises, available in the free tier, help you learn how to gather information about a target before attacking it. You'll use tools to find details about websites, domains, and networks. These exercises teach you how to collect data to help you plan your next steps in a penetration test.

View the exercises here:

Scope

For this exercise, the current targets are:

  • hackycorp.com

  • .hackycorp.com

  • 0x[%02x].a.hackycorp.com(find the red key)

  • balancer.hackycorp.com

  • z.hackycorp.com (DNS-related challenges)

  • Github account for Hackycorp

Exercise Solutions

PentesterLab: Learn with our Recon Badge

recon_00

/robots.txt

recon_01

404 pages

recon_02

/.well-known/security.txt

recon_03

directory listing

recon_04

/admin

recon_05

wfuzz

recon_06

vhost

recon_07

vhost over TLS

recon_08

alt name

recon_09

header

recon_10

visual recon

recon_11

virtual host brute

recon_12

load balance

recon_13

TXT

recon_14

zone transfer

recon_15

int zone transfer

recon_16

bind version

recon_17

dev name

recon_18

public repos

recon_19

find email

recon_20

check branches 1

recon_21

check branches 2

recon_22

deleted file

recon_23

commit message

recon_24

assets

recon_25

S3

recon_26

JS