Free Web Hacking Challenge Demonstrates Basic Reconnaissance

Summary

A Just Hacking Training livestream introduces Crosswind Systems, an intentionally vulnerable practice site, and demonstrates basic web application reconnaissance using page source, search results and crawler directives.

Key points

• Crosswind Systems is a fictional, intentionally vulnerable website available for public practice; a separate course provides structured exercises.
• The demonstration checks page source for exposed information, including software details, notes and an API reference.
• A site-restricted search reveals indexed pages, including API examples that may help map the application's functionality.
• The presenters recommend reviewing crawler directives for named paths that search engines are asked not to index.
• The livestream also introduces Only Lands, a free prompt-injection practice game, and outlines planned AI security training.