A practice pack of isolated mini-labs on ONE theme: secrets that leak through artifacts the build never meant to publish. Two tracks.
NAKED labs are minimal — one leak, one exploit, no decoys. Drill the mechanic. METHODOLOGY labs are realistic — you must hunt, tell the live secret from rotated decoys, and PROVE it by using it.
A recovered string is not a finding until you show what it unlocks. Route everything through Burp and grep responses for high-entropy, key-shaped strings (rk_live_, glpat-, APP_KEY, SECRET).
/.git/config exposes an internal remote URL with an embedded CI token..env file is served from the web root, leaking DB credentials and an APP_KEY..map file that expands to internal source paths and a key.