Lab 5
Level 1 - Beginner
Subdomain Discovery Simulation Lab
Level 1 Recon & Enumeration simulation: learn how development or staging subdomains can expose additional services during recon.
Beginner
Recon & Enumeration • 20 min
Learning Objectives
This lab is a controlled simulation only. No real backend or dangerous code execution is used.
Objective 1
Review a fake company target profile and think about common environment subdomains.
Objective 2
Identify predictable DNS naming patterns that expose extra services.
Objective 3
Understand why public dev or staging hosts can widen attack surface.
Challenge Area
Use the input fields below to safely simulate the vulnerable behavior.
Discovered Subdomain
Fake Company Target Info
Primary domain: hacklearn.local
Known environments: production plus one exposed internal-style host
Submitted subdomain: (none yet)
Result Panel
Use the fake company target info to identify a likely exposed environment subdomain. The lab succeeds when the guess matches a predictable host.
Hints
Reveal them progressively if you get stuck.
Click the hint button to reveal progressive guidance.