hackerdna
ethical hacking
Certificate of Achievement
Cybersecurity Training Excellence
This certificate is proudly presented to
saraivadigital
In recognition of demonstrating exceptional skills and dedication in cybersecurity training
Achieved Rank #2
Earned 20,929 XP
Completed 40 Labs
Validated 92 Modules
1 First Blood Achievements
Achievement Details
Comprehensive breakdown of your cybersecurity accomplishments
Best Ranking
#2
Current: #2
Total XP
20929
All Time
Labs & Challenges Completed
40
129 User Flags • 28 Root Flags
Modules Completed
92
11 Courses
First Bloods
1
First to Complete
Best Streak
144
Consecutive Days
Skills Acquired
Technical skills practiced through completed labs
Password CrackingCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReusePrompt InjectionLLM SecurityAI Red TeamingJailbreakOWASP LLM Top 10Guardrail BypassSystem Prompt LeakageExcessive AgencySSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassCommand InjectionLinux CapabilitiesReverse ShellWeb Application SecuritySystem EnumerationNetwork ReconnaissanceWPInput Validation BypassRemote Code ExecutionFilter EvasionWeb SecuritySSHBrute ForceLinuxSudoPenetration TestingLocal File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationLog AnalysisFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationJWT ManipulationSSH ExploitationLog InjectionLinux SecurityFile EnumerationCron JobsConfiguration AnalysisWeb ExploitationHeadless CMSInformation DisclosureRevision HistoryToken AbuseMYSQLIRCEDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBMass AssignmentLinux Privilege EscalationHost Header InjectionPassword Reset PoisoningHTTP HeadersWEBWeb EnumerationGITPHPApache TomcatWAR DeploymentDefault CredentialsWeb ShellsPythonPickle DeserializationReverse EngineeringBinary AnalysisCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraSSTIFlask SecuritySSH Brute ForceDatabase EnumerationSQL InjectionFile PermissionsAuthenticationIP SPOOFINGIDORAPI SecurityPath TraversalAccess ControlLFICookie PoisoningSession TamperingBase64 EncodingBrowser DevToolsClient-Side SecuritySecurity Through ObscurityView SourceBroken Access ControlHTMLFTPNmapNmap CommandsTelnetPort ScanningView Source CodeSource Code AnalysisBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFCTF BasicsFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Modules Completed
Course chapters completed during this achievement
Active Directory Attacks
10 modulesKerberoasting
AD fundamentals
NTLM relay
DCSync
AD persistence
Lateral movement
Delegation attacks
Password spraying
AD enumeration
AS-REP Roasting
Security Careers & Certifications
2 modulesPenetration testing careers
The cybersecurity industry
Network Pentesting
10 modulesActive reconnaissance
Post-exploitation
Pivoting
Service exploitation
Pentest reporting
Password attacks
MITM attacks
Vulnerability scanning
Network fundamentals
Service enumeration
Red Teaming
10 modulesAttack infrastructure
Persistence techniques
Initial access
Red team basics
Purple teaming
Defense evasion
Engagement reporting
C2 frameworks
Mission objectives
Lateral movement
Security Cheat Sheets
10 modulesHydra Cheat Sheet
Nikto Cheat Sheet
John the Ripper Cheat Sheet
SQLMap Cheat Sheet
Wireshark Cheat Sheet
Burp Suite Cheat Sheet
Gobuster Cheat Sheet
Nmap Cheat Sheet
Hashcat Cheat Sheet
Metasploit Cheat Sheet
Web App Attacks
12 modulesCSRF Attacks
XXE Injection
SSRF
File Inclusion
Web Security Intro
SSTI
Deserialization
File Upload Attacks
XSS Attacks
Auth Bypass
SQL Injection
Command Injection
Bug Bounty
10 modulesQuick wins
Hunting setup
Automation
Bug bounty basics
Hunting methodology
Avoiding duplicates
Bug bounty career
Recon fundamentals
Report writing
Program selection
Web Security Basics
10 modulesAuthentication mechanisms
Cookies and sessions
HTTP security headers
HTTP requests and responses
Browser DevTools for recon
HTTPS and TLS
Common web vulnerabilities
URLs, domains, and DNS
HTML and the browser
Same-origin policy and CORS
JWT Attacks
4 modulesJWT Basics
JWT Tampering
JWT Cracking
Algorithm Confusion
Threat Hunting
4 modulesThreat hunting foundations
MITRE ATT&CK hunting
Endpoint and network hunting
The hunt loop
Hacking 101
10 modulesThe network underneath
Vulnerabilities and exploits
How passwords break
Encoding is not encryption
The hacker mindset
Your roadmap
Hacking humans
Hidden in plain sight
Open-source intelligence
The hacker's toolkit
Completed Labs & Challenges
Successfully pwned machines during this achievement
Password Cracking - Custom Wordlist Attack
Easy
Password CrackingCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword Reuse
Prompt Injection: Jailbreak an AI Assistant
Hard
Prompt InjectionLLM SecurityAI Red TeamingJailbreakOWASP LLM Top 10Guardrail BypassSystem Prompt LeakageExcessive Agency
SSRF Attack: Steal Cloud Metadata Credentials
Medium
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI Enumeration
Packet Pursuit
Easy
Network AnalysisPacket CaptureWiresharkProtocol Analysis
Broken Chain
Hard
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
Compromised 2
Hard
Advanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassPrivilege Escalation
Internal
Hard
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
WP Ultimate
Hard
WP
RCE Playground
Medium
Command InjectionInput Validation BypassRemote Code ExecutionFilter EvasionWeb Security
Matsudo
Medium
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
FiPloit
Easy
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Anonymous 2
Easy
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Infiltrator
Easy
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
Scheduled Sabotage
Easy
LinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration Analysis
Mythos Leak - Headless CMS Draft Exposure
Medium
Web ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePrivilege Escalation
Query Quake
Medium
MYSQLIRCE
Hack the Box
Hard
Directory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDB
Pwnify - Web Application Penetration Testing
Hard
Web Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration Testing
Host Hijack
Medium
Host Header InjectionPassword Reset PoisoningCommand InjectionPrivilege EscalationHTTP Headers
AlVault
Medium
WEB
TechNova Infiltration
Medium
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Traversed
Medium
GIT
Beyond Echo
Medium
PHPRCE
Compromised 1
Medium
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Pickle Jar
Medium
PythonPickle DeserializationRCEPrivilege EscalationLinux
Reverse Engineering: License Key Crackme
Medium
Reverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidra
FortiPy
Hard
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
Alpwned
Medium
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
Hidden CMS Breach
Medium
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
Cronpocalypse
Easy
SSH
Spoof!
Easy
IP SPOOFING
ClearDesk
Medium
IDORAPI SecurityPath TraversalAccess ControlPrivilege Escalation
Include me
Easy
PHPLFI
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Cookie PoisoningSession TamperingBase64 EncodingPrivilege EscalationBrowser DevToolsClient-Side SecurityWeb Exploitation
Secrets in Source 2: Bypass Security Through Obscurity
Very Easy
Client-Side SecuritySecurity Through ObscurityBrowser DevToolsView SourceInformation DisclosureBroken Access ControlWeb SecurityHTML
Anonymous
Easy
FTP
Nmap Commands Lab: Port Scanning to Privilege Escalation
Very Easy
NmapNmap CommandsTelnetPort ScanningNetwork ReconnaissancePrivilege Escalation
Secrets in Source: View Source Code to Find the Flag
Very Easy
View Source CodeHTMLBrowser DevToolsInformation DisclosureBroken Access ControlSource Code AnalysisWeb Security
Hack the Login
Very Easy
Authentication BypassBroken AuthenticationClient-Side SecurityWeb SecurityDeveloper ToolsLearning Path
Capture the Flag 101: Find and Submit Your First Flag
Very Easy
Capture The FlagCTFCTF BasicsFlag SubmissionUUIDGetting StartedCyber Security Fundamentals