> For the complete documentation index, see [llms.txt](https://www.marialc.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.marialc.com/pentesterlab-labs/recon-badge/recon_24-assets.md).
# recon\_24 (assets)
View the exercise here: [PentesterLab: Recon 24](https://pentesterlab.com/exercises/recon_24/course)
### **OBJECTIVE**
For this challenge, your goal is to look at the server used to load assets (JavaScript, CSS) and find a file named **key.txt**.
### **WHY?**
It's essential to look for files that may be publicly available on the servers used to load assets.
### **SOLUTION**
`View Page Source` of `hackycorp.com`
Click `//assets.hackycorp.com/vendor…`
Remove `view-source:` prefix of the URL
From the objectives, it says that the file name is `key.txt`
{% hint style="success" %}
Append **`/key.txt`** in the URL to see the flag
{% endhint %}
