This lesson is the recommended starting point for the Nebula application track. It walks you through the activities every authorized tester performs before sending a single payload at a target.
Learning objectives
By the end of this lesson you will be able to:
- Map the Nebula application as an ordinary user and identify the major features of the storefront.
- Read a Privacy Policy as an intelligence source rather than a legal formality.
- Model how registration and login establish a low-privilege session.
- Locate the hidden Score Board route and explain why the page is considered hidden.
Prerequisites
web-application-anatomyandhttp-fundamentalsprovide useful vocabulary, but no external tool is required.- You will use the custom Nebula Target Explorer on the right. Its Target Map, Recon Sources, and Score Board walkthrough simulate the reconnaissance workflow entirely inside the lesson page.
Estimated time
Approximately ten minutes.
What you will do
You will interact with the custom Nebula Target Explorer. Expand its route cards, review its simulated reconnaissance sources, model the registration-to-login sequence, and reveal the hidden Score Board route without opening a separate browser tab or creating a real account.
When you are ready, send the Continue signal.