Level 1 - Beginner

Recon & Enumeration

This beginner-friendly recon track teaches learners how visible attack surface is discovered through public clues, predictable routes, exposed files, and technology fingerprints.

Level 1BeginnerRecon & Enumeration
10 live / 10 planned labs
Available Now

Live Labs

All ten recon labs are now active, covering predictable endpoints, exposed files, hidden infrastructure, public documentation, and fingerprinting clues.

Track Order

Recon & Enumeration is numbered locally inside this track so future additions stay clean and predictable.

Lab 1
Recon Endpoint Discovery Lab
Lab 2
Robots.txt Discovery Lab
Lab 3
Sitemap Recon Lab
Lab 4
Hidden Directory Guess Lab
Lab 5
Subdomain Discovery Simulation Lab
Lab 6
Parameter Discovery Lab
Lab 7
Public Backup File Discovery Lab
Lab 8
Metadata Leakage Lab
Lab 9
Exposed API Docs Lab
Lab 10
Technology Fingerprinting Lab