A practice pack of isolated mini-labs. Naked labs strip everything away so you can drill a single recon technique; methodology labs hide the finding inside a more realistic app with decoys, so you have to build a method to hunt it down. Each mini-lab is self-contained and marks itself solved when you reach its goal.
0 / 7 mini-labs solved this session. See Progress for the full tally.
Minimal UI, exactly one finding each — isolate the technique.
One hidden path is disclosed only in robots.txt. Reach it to solve.
One hidden path is discoverable only via sitemap.xml. Reach it to solve.
A single leftover .bak file is exposed in the webroot. Fetch it to solve.
The .git directory was shipped to the webroot. Read its config to solve.
One API endpoint is referenced only inside the page's JavaScript. Hit it to solve.
A JavaScript source map is exposed and leaks an internal path. Fetch the map to solve.
Realistic app, decoys and dead ends — search and develop a method.
No single artifact gives you the answer - chain several recon findings to reach the goal.