darkbb
✦ Legend ✦
En ligne
...
Activité
65 jours actifs sur la dernière annéeProgression de Rang
✦ Legend ✦
Rang Maximum
Accomplissements
Série Débutant
Maître de la Série
Légende de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
Membre Pro
API SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization BypassNetwork ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisJenkinsCI/CDDevOpsWeb SecurityPentestAutomationSession ManagementAuthenticationPHPLFIPassword CrackingAuthentication BypassDirectory TraversalPath ManipulationFile InclusionFlaskDebug ModePythonMemory AnalysisPath TraversalCGIFile AccessInput ValidationLogic FlawParameter ManipulationCommand InjectionWeb ExploitationNetwork SecuritySQL InjectionDatabase SecurityJWTToken AuthenticationCryptographyAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingJavaScriptClient-Side SecurityDOM ManipulationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionApache SecuritySystem AdministrationLog AnalysisFile UploadBypass TechniquesWeb ShellsPost ExploitationCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReuseShell CommandsHTTP Parameter ManipulationSecurity AssessmentServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation GatheringJinja2 ExploitationLDAP InjectionDirectory ServicesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationCookie ManipulationSUID BinariesLinux SecurityBinary ExploitationNoSQL InjectionMongoDBDocument DatabasesBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVisibility ControlsSecurity TestingOperator ExploitationGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryPDF SecurityDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationGraphQLSchema IntrospectionInjectionBrowser DevToolsFilter BypassApache AuthenticationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoveryWeb DevelopmentHexadecimalSteganographyImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisRainbow TablesBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisWeb InspectionHTML AnalysisQR Code AnalysisData ExtractionCryptanalysisClassical CryptoPattern RecognitionMemory ForensicsTool UsageROT13 EncodingFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsMetadataHidden DataForensic ToolsLSBAudio AnalysisTransposition CipherRail FenceKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsDNSPacket AnalysisData ExfiltrationBase64 DecodingZIP Password CrackingfcrackzipBrute ForceArchive SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksClassical CiphersHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingWindows RegistryPersistence AnalysisMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationFrequency AnalysisSecurity BypassClient-Side ManipulationIDORRace ConditionsTiming AttacksConcurrent ExploitationWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityURL ManipulationInternal Network AccessProtocol BypassPrompt InjectionLLM SecurityAI Red TeamingJailbreakOWASP LLM Top 10Guardrail BypassSystem Prompt LeakageExcessive AgencyNetwork ForensicsDNS AnalysisTraffic AnalysisDeobfuscationCode AnalysisEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationPolyalphabetic CiphersRequest SmugglingPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesType JugglingHash AnalysisGitVersion ControlReconnaissanceWeb EnumerationPassword AnalysisSecurity ToolsRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatCSSMedia QueriesWeb ForensicsSource AnalysisDevToolsUnicodeText AnalysisLinuxCommand LineFile System NavigationHidden FilesgrepfindFile Upload BypassPHP SecurityWeb Shell ExploitationOAuth 2.0Web ReconConfiguration ExploitsSSHSudoLinux CapabilitiesReverse ShellSystem EnumerationAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationFilter EvasionXORKnown-Plaintext AttackFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationFile EnumerationCron JobsConfiguration AnalysisWPJWT ManipulationSSH ExploitationLog InjectionMass AssignmentLinux Privilege EscalationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBSSTISSH Brute ForceApache TomcatWAR DeploymentDefault CredentialsMYSQLIRCECloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftMetadata Service AbuseAPI EnumerationGITHeadless CMSInformation DisclosureRevision HistoryToken AbuseWEBCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraHost Header InjectionPassword Reset PoisoningPickle DeserializationFile PermissionsAccess ControlIP SPOOFINGFTPCookie PoisoningSession TamperingSecurity Through ObscurityView SourceBroken Access ControlHTMLNmapNmap CommandsTelnetPort ScanningView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
API Breaker
Défi
Red is Dead
Défi
Snapchat Exposed
Défi
Session Switch
Défi
Corporate Breach
Défi
Corporate Breach 2
Défi
Flask Error
Défi
Path Traversal
Défi
API Logic Flaw
Défi
Ping Pwn
Défi
Auth Bypass
Défi
JWT Bypass
Défi
JWT Algo Confusion
Défi
XXE Exposed
Défi
XSS Playground
Défi
CSRF Bank Transfer
Défi
URL Scanner
Défi
LFI Log Poison
Défi
File Upload Bypass
Défi
Template Injection
Défi
IP Spoofing Admin
Défi
Template Injector
Défi
LDAP Injector
Défi
Redis Cache Poisoner
Défi
Cookie Forge
Défi
MongoDB Injector
Défi
SQL Injection
Défi
NoSQL Injection
Défi
Git Secrets Hunter
Défi
PDF Password Cracker
Défi
Registry Hijacker
Défi
GraphQL Gateway
Défi
Button Activator
Défi
File Include Bypass
Défi
Hex Hunt
Défi
Stego Hunt
Défi
Packet Pursuit
Facile
Get the Password
Défi
Binary Secrets
Défi
Base64 Detective
Défi
QR Code Quest
Défi
Crypto Cipher
Défi
Memory Forensics
Défi
Log Hunter
Défi
Blockchain Secrets
Défi
PDF Trap
Défi
Pixel Puzzler
Défi
Sonic Cipher
Défi
Rail Fence
Défi
KeePass Breaker
Défi
DNS Exfil
Défi
ZIP Cracker
Défi
Admin Portal Breach
Défi
Registry Hunter
Défi
WEP Cracker
Défi
Caesar Shift Decoder
Défi
Header Hijacker
Défi
IDOR Explorer
Défi
WebDAV Explorer
Défi
YAML Bomb
Défi
Test d'injection SQL
Défi
SSRF Validator
Défi
Hack This Site
Défi
Vigenère Stego Hunt
Défi
HTTP Smuggling
Défi
Type Juggling Bypass
Défi
Git Exposed
Défi
Backup Hunter
Défi
Crack SHA1 Hash
Défi
Regex Bypass to SQLi
Défi
Shadow Cracker
Défi
Fine Print
Défi
Phantom Text
Défi
FiPloit
Facile
Token Trust
Défi
Matsudo
Moyen
Internal
Difficile
Compromised 2
Difficile
RCE Playground
Moyen
XOR Reuse
Défi
Anonymous 2
Facile
Broken Chain
Difficile
Scheduled Sabotage
Facile
WP Ultimate
Difficile
Infiltrator
Facile
Hack the Box
Difficile
FortiPy
Difficile
Compromised 1
Moyen
Query Quake
Moyen
Traversed
Moyen
AlVault
Moyen
Beyond Echo
Moyen
Host Hijack
Moyen
TechNova Infiltration
Moyen
Pickle Jar
Moyen
Alpwned
Moyen
Hidden CMS Breach
Moyen
ClearDesk
Moyen
Cronpocalypse
Facile
Spoof!
Facile
Anonymous
Facile
Include me
Facile
Hack the Login
Très Facile
Données ajoutées et carving
Fondamentaux de la stéganographie
Métadonnées et secrets EXIF
Steghide et cassage de phrase secrète
Stéganographie LSB d'images
Détections YARA et Sigma
Fondamentaux de la chasse
Chasse avec MITRE ATT&CK
Fondamentaux du renseignement
Le programme de chasse
IOC, flux et plateformes
Chasse endpoint et réseau
La boucle de chasse
Daily Hack Solved
- The codes the page had to know
+10 XP
18 hours ago
Daily Hack Solved
- The word you already know
+10 XP
1 day ago
Daily Hack Solved
- The claim inside the claim
+10 XP
2 days ago
Streak Frozen
3 days ago
Streak Frozen
4 days ago
Daily Hack Solved
- The second factor in the backup
+10 XP
5 days ago
Daily Hack Solved
- The header that says where you are
+10 XP
6 days ago
Daily Hack Solved
- After the last byte
+10 XP
1 week ago
Daily Hack Solved
- Every road leads there
+10 XP
1 week ago
Flag Found
- API Breaker
+50 XP
1 week ago
Flag Found
- Red is Dead
+50 XP
1 week ago
Flag Found
- Snapchat Exposed
+50 XP
1 week ago
Flag Found
- Session Switch
+50 XP
1 week ago
Flag Found
- Corporate Breach
+50 XP
1 week ago
Flag Found
- Corporate Breach 2
+50 XP
1 week ago
Flag Found
- Flask Error
+50 XP
1 week ago
Flag Found
- Path Traversal
+50 XP
1 week ago
Flag Found
- API Logic Flaw
+50 XP
1 week ago
Flag Found
- Ping Pwn
+50 XP
1 week ago
Daily Hack Solved
- Instructions in the wiki
+10 XP
1 week ago
Actif pendant 1 jours
1 week ago
Flag Found
- Auth Bypass
+50 XP
1 week ago
Flag Found
- JWT Bypass
+50 XP
1 week ago
Flag Found
- JWT Algo Confusion
+50 XP
1 week ago
Lesson Completed
+10 XP
1 week ago
Flag Found
- XXE Exposed
+50 XP
1 week ago
Daily Hack Solved
- Write it back
+10 XP
1 week ago
Profile Updated
+3 XP
1 week ago
Flag Found
- JWT Claims Manipulation
+50 XP
1 week ago
Flag Found
- XSS Playground
+50 XP
1 week ago
Daily Hack Solved
- Approved by somebody else
+10 XP
1 week ago
Daily Hack Solved
- The trigger that changed everything
+10 XP
1 week ago
Actif pendant 1 jours
2 weeks ago
Flag Found
- CSRF Bank Transfer
+50 XP
2 weeks ago
Daily Hack Solved
- The light that talks
+10 XP
2 weeks ago
Daily Hack Solved
- One page of six
+10 XP
2 weeks ago
Daily Hack Solved
- Bigger than it says
+10 XP
2 weeks ago
Daily Hack Solved
- The fill that was arranged
+10 XP
2 weeks ago
Daily Hack Solved
- The sender nobody owns
+10 XP
2 weeks ago
Daily Hack Solved
- The invite that made an owner
+10 XP
2 weeks ago
Actif pendant 1 jours
3 weeks ago
Daily Hack Solved
- The cert that named it
+10 XP
3 weeks ago
Flag Found
- URL Scanner
+50 XP
3 weeks ago
Daily Hack Solved
- Where the link really goes
+10 XP
3 weeks ago
Flag Found
- LFI Log Poison
+50 XP
3 weeks ago
Daily Hack Solved
- The allowlist that isn't
+10 XP
3 weeks ago
Daily Hack Solved
- Three keys, one account
+10 XP
3 weeks ago
Daily Hack Solved
- The canary build
+10 XP
3 weeks ago
Daily Hack Solved
- The gateway that appeared
+10 XP
3 weeks ago
Flag Found
- File Upload Bypass
+50 XP
4 weeks ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat