> For the complete documentation index, see [llms.txt](https://www.marialc.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.marialc.com/pentesterlab-labs/recon-badge.md).

# Recon Badge

Pentesterlab's Recon exercises, available in the free tier, help you learn how to gather information about a target before attacking it. You'll use tools to find details about websites, domains, and networks. These exercises teach you how to collect data to help you plan your next steps in a penetration test.

View the exercises here: [PentesterLab: Learn with our Recon Badge](https://pentesterlab.com/badges/recon)

{% hint style="info" %}

### Scope

For this exercise, the current targets are:

* **hackycorp.com**
* **.hackycorp.com**
* **0x\[%02x].a.hackycorp.com**(find the red key)
* **balancer.hackycorp.com**
* **z.hackycorp.com** (DNS-related challenges)
* Github account for Hackycorp
  {% endhint %}

### Exercise Solutions

<table data-view="cards"><thead><tr><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><strong>recon_00</strong></td><td>/robots.txt</td><td><a href="/pentesterlab-labs/recon-badge/recon_00-robots.txt.md">recon_00 (/robots.txt)</a></td></tr><tr><td><strong>recon_01</strong></td><td>404 pages</td><td><a href="/pentesterlab-labs/recon-badge/recon_01-404-pages.md">recon_01 (404 pages)</a></td></tr><tr><td><strong>recon_02</strong></td><td>/.well-known/security.txt</td><td><a href="/pentesterlab-labs/recon-badge/recon_02-.well-known-security.txt.md">recon_02 (/.well-known/security.txt)</a></td></tr><tr><td><strong>recon_03</strong></td><td>directory listing</td><td><a href="/pentesterlab-labs/recon-badge/recon_03-directory-listing.md">recon_03 (directory listing)</a></td></tr><tr><td><strong>recon_04</strong></td><td>/admin</td><td><a href="/pentesterlab-labs/recon-badge/recon_04-admin.md">recon_04 (/admin)</a></td></tr><tr><td><strong>recon_05</strong></td><td>wfuzz</td><td><a href="/pentesterlab-labs/recon-badge/recon_05-wfuzz.md">recon_05 (wfuzz)</a></td></tr><tr><td><strong>recon_06</strong></td><td>vhost</td><td><a href="/pentesterlab-labs/recon-badge/recon_06-vhost.md">recon_06 (vhost)</a></td></tr><tr><td><strong>recon_07</strong></td><td>vhost over TLS</td><td><a href="/pentesterlab-labs/recon-badge/recon_07-vhost-over-tls.md">recon_07 (vhost over TLS)</a></td></tr><tr><td><strong>recon_08</strong></td><td>alt name</td><td><a href="/pentesterlab-labs/recon-badge/recon_08-alt-name.md">recon_08 (alt name)</a></td></tr><tr><td><strong>recon_09</strong></td><td>header</td><td><a href="/pentesterlab-labs/recon-badge/recon_09-header.md">recon_09 (header)</a></td></tr><tr><td><strong>recon_10</strong></td><td>visual recon</td><td><a href="/pentesterlab-labs/recon-badge/recon_10-visual-recon.md">recon_10 (visual recon)</a></td></tr><tr><td><strong>recon_11</strong></td><td>virtual host brute</td><td><a href="/pentesterlab-labs/recon-badge/recon_11-virtual-host-brute.md">recon_11 (virtual host brute)</a></td></tr><tr><td><strong>recon_12</strong></td><td>load balance</td><td><a href="/pentesterlab-labs/recon-badge/recon_12-load-balance.md">recon_12 (load balance)</a></td></tr><tr><td><strong>recon_13</strong></td><td> TXT</td><td><a href="/pentesterlab-labs/recon-badge/recon_13-txt.md">recon_13 (TXT)</a></td></tr><tr><td><strong>recon_14</strong></td><td>zone transfer</td><td><a href="/pentesterlab-labs/recon-badge/recon_14-zone-transfer.md">recon_14 (zone transfer)</a></td></tr><tr><td><strong>recon_15</strong></td><td>int zone transfer</td><td><a href="/pentesterlab-labs/recon-badge/recon_15-int-zone-transfer.md">recon_15 (int zone transfer)</a></td></tr><tr><td><strong>recon_16</strong></td><td>bind version</td><td><a href="/pentesterlab-labs/recon-badge/recon_16-bind-version.md">recon_16 (bind version)</a></td></tr><tr><td><strong>recon_17</strong></td><td>dev name</td><td><a href="/pentesterlab-labs/recon-badge/recon_17-dev-name.md">recon_17 (dev name)</a></td></tr><tr><td><strong>recon_18</strong></td><td> public repos</td><td><a href="/pentesterlab-labs/recon-badge/recon_18-public-repos.md">recon_18 (public repos)</a></td></tr><tr><td><strong>recon_19</strong></td><td>find email</td><td><a href="/pentesterlab-labs/recon-badge/recon_19-find-email.md">recon_19 (find email)</a></td></tr><tr><td><strong>recon_20</strong></td><td>check branches 1</td><td><a href="/pentesterlab-labs/recon-badge/recon_20-check-branches-1.md">recon_20 (check branches 1)</a></td></tr><tr><td><strong>recon_21</strong></td><td>check branches 2</td><td><a href="/pentesterlab-labs/recon-badge/recon_21-check-branches-2.md">recon_21 (check branches 2)</a></td></tr><tr><td><strong>recon_22</strong></td><td>deleted file</td><td><a href="/pentesterlab-labs/recon-badge/recon_22-deleted-file.md">recon_22 (deleted file)</a></td></tr><tr><td><strong>recon_23</strong></td><td>commit message</td><td><a href="/pentesterlab-labs/recon-badge/recon_23-commit-message.md">recon_23 (commit message)</a></td></tr><tr><td><strong>recon_24</strong></td><td>assets</td><td><a href="/pentesterlab-labs/recon-badge/recon_24-assets.md">recon_24 (assets)</a></td></tr><tr><td><strong>recon_25</strong></td><td>S3</td><td><a href="/pentesterlab-labs/recon-badge/recon_25-s3.md">recon_25 (S3)</a></td></tr><tr><td><strong>recon_26</strong></td><td>JS</td><td><a href="/pentesterlab-labs/recon-badge/recon_26-js.md">recon_26 (JS)</a></td></tr></tbody></table>