hackerdna
ethical hacking
Certificate of Achievement
Cybersecurity Training Excellence
This certificate is proudly presented to
H3xCore
In recognition of demonstrating exceptional skills and dedication in cybersecurity training
Achieved Rank #3
Earned 13,959 XP
Completed 38 Labs
Validated 17 Modules
Achievement Details
Comprehensive breakdown of your cybersecurity accomplishments
Best Ranking
#3
Current: #16
Total XP
13959
All Time
Labs & Challenges Completed
38
110 User Flags • 22 Root Flags
Modules Completed
17
4 Courses
First Bloods
0
First to Complete
Best Streak
29
Consecutive Days
Skills Acquired
Technical skills practiced through completed labs
Web Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingMD5Password CrackingJohn the Ripperhashidhash-identifierCrackStationWordlist AttackPre-SecurityLinuxgrepfindpipeswcwhoamichmodpermissionsrwxstatcattouchechocpmvrmTerminalpwdlscdFilesystemWeb ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePrivilege EscalationWEBPythonPickle DeserializationRCEIDORAPI SecurityPath TraversalAccess ControlHost Header InjectionPassword Reset PoisoningHTTP HeadersGITInput Validation BypassRemote Code ExecutionFilter EvasionWeb SecurityJWT ManipulationSSH ExploitationLog InjectionLinux SecuritySSHFile EnumerationCron JobsConfiguration AnalysisPHPMYSQLIDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationSSTIFlask SecuritySSH Brute ForceDatabase EnumerationWeb EnumerationCVE ExploitationIP SPOOFINGLFISQL InjectionAuthentication BypassFile PermissionsReverse ShellSystem EnumerationNetwork ReconnaissanceApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsBrute ForceAuthenticationLocal File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationLog AnalysisFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPClient-Side SecuritySecurity Through ObscurityBrowser DevToolsView SourceBroken Access ControlHTMLCookie PoisoningSession TamperingBase64 EncodingBroken AuthenticationDeveloper ToolsLearning PathNmapNmap CommandsTelnetPort ScanningView Source CodeSource Code AnalysisCapture The FlagCTFCTF BasicsFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Modules Completed
Course chapters completed during this achievement
HTTP Header Manipulation: IP Spoofing
3 modulesRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Bug Bounty
10 modulesQuick wins
Hunting setup
Automation
Bug bounty basics
Hunting methodology
Avoiding duplicates
Bug bounty career
Recon fundamentals
Report writing
Program selection
Remote Code Execution (RCE)
3 modulesShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Hacking 101
1 modulesThe hacker mindset
Completed Labs & Challenges
Successfully pwned machines during this achievement
Pwnify - Web Application Penetration Testing
Hard
Web Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration Testing
MD5 Hash Cracking
Very Easy
MD5Hash CrackingPassword CrackingJohn the Ripperhashidhash-identifierCrackStationWordlist Attack
Linux Basics: Searching Files
Very Easy
Pre-SecurityLinuxgrepfindpipeswc
Linux Basics: File Permissions
Very Easy
Pre-SecurityLinuxwhoamichmodpermissionsrwxstat
Linux Basics: Files and Folders
Very Easy
Pre-SecurityLinuxcattouchechocpmvrmwc
Linux Basics: First Commands
Very Easy
Pre-SecurityLinuxTerminalpwdlscdFilesystem
Mythos Leak - Headless CMS Draft Exposure
Medium
Web ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePrivilege Escalation
AlVault
Medium
WEB
Pickle Jar
Medium
PythonPickle DeserializationRCEPrivilege EscalationLinux
ClearDesk
Medium
IDORAPI SecurityPath TraversalAccess ControlPrivilege Escalation
Host Hijack
Medium
Host Header InjectionPassword Reset PoisoningCommand InjectionPrivilege EscalationHTTP Headers
Traversed
Medium
GIT
RCE Playground
Medium
Command InjectionInput Validation BypassRemote Code ExecutionFilter EvasionWeb Security
Infiltrator
Easy
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
Scheduled Sabotage
Easy
LinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration Analysis
Beyond Echo
Medium
PHPRCE
Cronpocalypse
Easy
SSH
Query Quake
Medium
MYSQLIRCE
Hack the Box
Hard
Directory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDB
Broken Chain
Hard
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
FortiPy
Hard
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
TechNova Infiltration
Medium
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Spoof!
Easy
IP SPOOFING
Include me
Easy
PHPLFI
Alpwned
Medium
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
Internal
Hard
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
Compromised 1
Medium
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Matsudo
Medium
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Hidden CMS Breach
Medium
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
FiPloit
Easy
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Anonymous 2
Easy
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Anonymous
Easy
FTP
Secrets in Source 2: Bypass Security Through Obscurity
Very Easy
Client-Side SecuritySecurity Through ObscurityBrowser DevToolsView SourceInformation DisclosureBroken Access ControlWeb SecurityHTML
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Cookie PoisoningSession TamperingBase64 EncodingPrivilege EscalationBrowser DevToolsClient-Side SecurityWeb Exploitation
Hack the Login
Very Easy
Authentication BypassBroken AuthenticationClient-Side SecurityWeb SecurityDeveloper ToolsLearning Path
Nmap Commands Lab: Port Scanning to Privilege Escalation
Very Easy
NmapNmap CommandsTelnetPort ScanningNetwork ReconnaissancePrivilege Escalation
Secrets in Source: View Source Code to Find the Flag
Very Easy
View Source CodeHTMLBrowser DevToolsInformation DisclosureBroken Access ControlSource Code AnalysisWeb Security
Capture the Flag 101: Find and Submit Your First Flag
Very Easy
Capture The FlagCTFCTF BasicsFlag SubmissionUUIDGetting StartedCyber Security Fundamentals