dammon
✦ Legend ✦
a king
Activité
40 jours actifs sur la dernière année
Moins
Plus
Progression de Rang
✦ Legend ✦
Rang Maximum
Accomplissements
Premier Sang
Série Débutant
Maître de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationCommand InjectionLinux CapabilitiesReverse ShellWeb Application SecuritySystem EnumerationNetwork ReconnaissanceAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationInput Validation BypassRemote Code ExecutionFilter EvasionWeb SecurityJWT ManipulationSSH ExploitationLog InjectionLinux SecurityJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisDOM ManipulationClient-Side SecurityJWTCookie ManipulationLocal File InclusionFilter BypassApache AuthenticationPassword CrackingDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentHTTP HeadersSecurity BypassClient-Side ManipulationIDORParameter ManipulationAuthorization BypassRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationModern Web VulnerabilitiesWebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityInput ValidationPath ManipulationFile AccessCryptographySteganographyClassical CiphersImage AnalysisPolyalphabetic CiphersURL ManipulationInternal Network AccessProtocol BypassWeb EnumerationFile DiscoveryReconnaissanceInformation GatheringGitVersion ControlSource Code AnalysisSQL InjectionRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionJohn the RipperHashcatWindows SecurityNTLMHash AnalysishashcatUnicodeWeb ForensicsPythonText AnalysisOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackHex EncodingWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisMD5Rainbow TablesBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisBase64Web InspectionData EncodingHTML AnalysisQR Code AnalysisData ExtractionDigital ForensicsWeb HackingLogic FlawsToken ManipulationBase64 EncodingMemory ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 EncodingService DiscoveryDatabase ForensicsCLI UsageRedisJenkinsCI/CDDevOpsPentestAutomationSession ManagementAuthenticationPHPCryptanalysisClassical CryptoDNSPacket AnalysisBase64 DecodingLFIFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsMetadataHidden DataForensic ToolsLSBForensicsAudio AnalysisTransposition CipherRail FenceFlaskDebug ModeMemory AnalysisLogic FlawToken AuthenticationAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityAWS EC2Bypass TechniquesWeb ShellsPost ExploitationNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationPDF SecurityDictionary AttacksDocument SecurityBrute Force AttacksJinja2Flask SecurityWeb Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTMD5 CrackingPassword AttacksHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingWindows RegistryPersistence AnalysisMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationIP SpoofingJinja2 ExploitationLDAP InjectionDirectory ServicesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDocument DatabasesSUID BinariesBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFrequency AnalysisEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationHTTP ProtocolRequest SmugglingLinuxCommand LineFile System NavigationHidden FilesgrepfindCSSMedia QueriesSource AnalysisDevToolsHash CrackingPassword AnalysisSecurity ToolsType JugglingGraphQLSchema IntrospectionInjectionSSHFile EnumerationCron JobsConfiguration AnalysisFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationDeobfuscationCode AnalysisCommand Line ToolsAttack DetectionWeb ExploitationPath TraversalCGICrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraMass AssignmentPassword ReuseLinux Privilege EscalationHost Header InjectionPassword Reset PoisoningPickle DeserializationRCEFile PermissionsMYSQLIApache TomcatWAR DeploymentDefault CredentialsSudoGITWEBHeadless CMSInformation DisclosureRevision HistoryToken AbuseAccess ControlSSTISSH Brute ForceWPDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperFile Upload BypassPHP SecurityWeb Shell ExploitationIP SPOOFINGFTPSecurity Through ObscurityView SourceBroken Access ControlHTMLNmapNmap CommandsTelnetPort ScanningCookie PoisoningSession TamperingView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Internal
Difficile
Compromised 2
Difficile
Broken Chain
Difficile
RCE Playground
Moyen
Infiltrator
Facile
Hex Hunt
Défi
Button Activator
Défi
Cookie Forge
Défi
File Include Bypass
Défi
Header Hijacker
Défi
IDOR Explorer
Défi
WebDAV Explorer
Défi
YAML Bomb
Défi
Vigenère Stego Hunt
Défi
SSRF Validator
Défi
Backup Hunter
Défi
Git Exposed
Défi
Regex Bypass to SQLi
Défi
Shadow Cracker
Défi
Phantom Text
Défi
Token Trust
Défi
XOR Reuse
Défi
Stego Hunt
Défi
Packet Pursuit
Défi
Get the Password
Défi
Binary Secrets
Défi
Base64 Detective
Défi
QR Code Quest
Défi
API Breaker
Défi
Memory Forensics
Défi
Red is Dead
Défi
Snapchat Exposed
Défi
Session Switch
Défi
Crypto Cipher
Défi
DNS Exfil
Défi
Corporate Breach
Défi
Corporate Breach 2
Défi
Blockchain Secrets
Défi
PDF Trap
Défi
Pixel Puzzler
Défi
Sonic Cipher
Défi
Rail Fence
Défi
Flask Error
Défi
API Logic Flaw
Défi
JWT Bypass
Défi
JWT Algo Confusion
Défi
XXE Exposed
Défi
SQL Injection
Défi
XSS Playground
Défi
CSRF Bank Transfer
Défi
URL Scanner
Défi
File Upload Bypass
Défi
NoSQL Injection
Défi
LFI Log Poison
Défi
PDF Password Cracker
Défi
Template Injection
Défi
KeePass Breaker
Défi
ZIP Cracker
Défi
Git Secrets Hunter
Défi
Admin Portal Breach
Défi
Registry Hunter
Défi
WEP Cracker
Défi
IP Spoofing Admin
Défi
Template Injector
Défi
LDAP Injector
Défi
Redis Cache Poisoner
Défi
MongoDB Injector
Défi
Registry Hijacker
Défi
Caesar Shift Decoder
Défi
HTTP Smuggling
Défi
Fine Print
Défi
Crack SHA1 Hash
Défi
Type Juggling Bypass
Défi
GraphQL Gateway
Défi
Scheduled Sabotage
Facile
Anonymous 2
Facile
Hack This Site
Défi
Test d'injection SQL
Défi
Log Hunter
Défi
Ping Pwn
Défi
Auth Bypass
Défi
Path Traversal
Défi
Host Hijack
Moyen
TechNova Infiltration
Moyen
Pickle Jar
Moyen
Alpwned
Moyen
Query Quake
Moyen
Hidden CMS Breach
Moyen
Compromised 1
Moyen
Traversed
Moyen
AlVault
Moyen
Matsudo
Moyen
ClearDesk
Moyen
FortiPy
Difficile
WP Ultimate
Difficile
Hack the Box
Difficile
Beyond Echo
Moyen
FiPloit
Facile
Cronpocalypse
Facile
Spoof!
Facile
Anonymous
Facile
Include me
Facile
Hack the Login
Très Facile
Outils d'analyse
Manipulation d'oracles
Bases de la blockchain
Failles de contrôle d'accès
Attaques par flash loan
Sécurité Solidity
Attaques de réentrance
L'état d'esprit du hacker
Actif pendant 1 jours
6 days ago
Daily Hack Solved
- Find the reentrancy bug
+10 XP
1 week ago
Chapter Completed
- Outils d'analyse
+1 XP
1 week ago
Chapter Completed
- Manipulation d'oracles
+1 XP
1 week ago
Chapter Completed
- Attaques par flash loan
+1 XP
1 week ago
Chapter Completed
- Failles de contrôle d'accès
+1 XP
1 week ago
Chapter Completed
- Attaques de réentrance
+1 XP
1 week ago
Chapter Completed
- Sécurité Solidity
+1 XP
1 week ago
Chapter Completed
- Bases de la blockchain
+1 XP
1 week ago
Daily Hack Solved
- Find the SQLi probe
+10 XP
1 week ago
Daily Hack Solved
- Find the employer
+10 XP
1 week ago
Actif pendant 1 jours
2 weeks ago
Daily Hack Solved
- PNG, not TXT
+10 XP
2 weeks ago
Daily Hack Solved
- Find the hidden email
+10 XP
2 weeks ago
Daily Hack Solved
- Same handle everywhere
+10 XP
3 weeks ago
Flag Found
- Attaque SSRF : voler les identifiants des métadonnées cloud
+200 XP
3 weeks ago
First Blood Root
- Attaque SSRF : voler les identifiants des métadonnées cloud
+80 XP
3 weeks ago
Flag Found
- Attaque SSRF : voler les identifiants des métadonnées cloud
+200 XP
3 weeks ago
Daily Hack Solved
- CloudTrail anomaly
+10 XP
3 weeks ago
Daily Hack Solved
- Vigenere then base64
+10 XP
3 weeks ago
Daily Hack Solved
- Find the hardcoded API key
+10 XP
3 weeks ago
Daily Hack Solved
- The GPG blob
+10 XP
3 weeks ago
Daily Hack Solved
- Hex back to text
+10 XP
4 weeks ago
Lesson Completed
+5 XP
4 weeks ago
Daily Hack Solved
- Flip the debug flag
+10 XP
4 weeks ago
Daily Hack Solved
- Read the shell history
+10 XP
4 weeks ago
Lesson Completed
+16 XP
1 month ago
Lesson Completed
+11 XP
1 month ago
Flag Found
- Internal
+350 XP
1 month ago
Flag Found
- Internal
+350 XP
1 month ago
Flag Found
- Compromised 2
+350 XP
1 month ago
Flag Found
- Compromised 2
+350 XP
1 month ago
Flag Found
- Broken Chain
+350 XP
1 month ago
Flag Found
- Broken Chain
+350 XP
1 month ago
Flag Found
- RCE Playground
+200 XP
1 month ago
Flag Found
- Infiltrator
+100 XP
1 month ago
Flag Found
- Infiltrator
+100 XP
1 month ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 month ago
Flag Found
- Hex Hunt
+50 XP
1 month ago
Flag Found
- DNS Tunneling Detective
+50 XP
1 month ago
Flag Found
- Button Activator
+50 XP
1 month ago
Flag Found
- Cookie Forge
+50 XP
1 month ago
Flag Found
- File Include Bypass
+50 XP
1 month ago
Flag Found
- Corporate Directory Hunt
+50 XP
1 month ago
Flag Found
- Header Hijacker
+50 XP
1 month ago
Flag Found
- IDOR Explorer
+50 XP
1 month ago
Flag Found
- Race Condition Hunter
+50 XP
1 month ago
Flag Found
- Prototype Pollution Hunter
+50 XP
1 month ago
Flag Found
- WebDAV Explorer
+50 XP
1 month ago
Flag Found
- YAML Bomb
+50 XP
1 month ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat