Cybersecurity · hands-on lab
Security Lab 03: Web Exposure — Finding What Should Not Be Served
Discover sensitive files a web server is leaking (backups, configs, directory listings) and lock them down.
- 40 minutesTime in the lab
- intermediateLevel
- 5 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Scenario. A developer rushed a site onto target. You have been asked to check what the web server is exposing before it goes live. Leaked backups and config files are one of the most common real-world breaches — you will find them and shut them off.
What you will do
- Find the exposed backup file
- Confirm the directory listing leak
- Write your findings
- What is the highest-risk finding here?question
- Remove the leaked files on the target
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.