H3xCore
Master
Classement
#15
Meilleur: #12
Points Totaux
822
Total Gagné
Labs Terminés
47
47 User • 15 Root
Modules
7
Validés
Premiers Sangs
0
Premier à Terminer
Meilleure Série
26
Jours
Compétences Acquises
Compétences techniques pratiquées à travers les labs terminés
UnicodeSteganographyWeb ForensicsPythonText AnalysisPDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksFlaskDebug ModeWeb SecurityMemory AnalysisWireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol ExploitationJWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationLinux SecurityLinuxSSHFile EnumerationCron JobsConfiguration AnalysisLocal File InclusionFilter BypassApache AuthenticationJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityWeb DevelopmentHexadecimalPHPRCEHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisMYSQLIDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisWebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation GatheringGitVersion ControlSource Code AnalysisReconnaissanceCryptographyHash CrackingPassword AnalysisSecurity ToolsIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationMD5Rainbow TablesOffice SecurityHash ExtractionHashcatWindows SecurityNTLMHash AnalysisWeb Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationWeb EnumerationCVE ExploitationPath InjectionFile System SecurityInput ValidationPath ManipulationFile AccessSSRFURL ManipulationInternal Network AccessProtocol BypassIP SPOOFINGLFIhashcatCommand LineFile System NavigationHidden FilesgrepfindSQL InjectionAuthentication BypassLinux Privilege EscalationFile PermissionsLinux CapabilitiesReverse ShellSystem EnumerationNetwork ReconnaissanceApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsPenetration TestingAuthenticationFile Upload BypassPHP SecurityWeb Shell ExploitationLog AnalysisFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPHTMLLearning PathWEBWebTELNETNetworkingWeb Services
Modules Terminés
Modules éducatifs validés avec succès
HTTP Header Manipulation: IP Spoofing
3 modulesRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Bug Bounty
1 modulesFondamentaux de recon
Remote Code Execution (RCE)
3 modulesShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Labs & Défis Terminés
Défis pratiques de cybersécurité terminés avec succès
Phantom Text
Défi
UnicodeSteganographyWeb ForensicsPythonText Analysis
PDF Password Cracker
Défi
PDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force Attacks
Flask Error
Défi
FlaskDebug ModePythonWeb SecurityMemory Analysis
WEP Cracker
Défi
Wireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol Exploitation
Infiltrator
Facile
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
Scheduled Sabotage
Facile
LinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration Analysis
File Include Bypass
Défi
Local File InclusionFilter BypassApache AuthenticationPassword Cracking
Button Activator
Défi
JavaScriptBrowser DevToolsDOM ManipulationClient-Side Security
Hex Hunt
Défi
JavaScriptWeb DevelopmentHexadecimalBrowser DevTools
Beyond Echo
Moyen
PHPRCE
Cronpocalypse
Facile
SSH
HTTP Smuggling
Défi
HTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisWeb SecurityPacket Analysis
Query Quake
Moyen
MYSQLIRCE
Hack the Box
Difficile
Directory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDB
Blockchain Secrets
Défi
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic Analysis
WebDAV Explorer
Défi
WebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System Enumeration
Email Header Forensics
Défi
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
ZIP Cracker
Défi
ZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive Security
IP Spoofing Admin
Défi
Web SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation Gathering
Git Exposed
Défi
GitVersion ControlSource Code AnalysisReconnaissanceWeb Security
Crack SHA1 Hash
Défi
CryptographyHash CrackingPassword AnalysisSecurity Tools
Broken Chain
Difficile
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
Get the Password
Défi
JavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevTools
Office Password Cracker
Défi
Password CrackingOffice SecurityHash ExtractionJohn the RipperHashcat
Windows Password Cracker
Défi
Password CrackingWindows SecurityNTLMHashcatJohn the RipperHash Analysis
FortiPy
Difficile
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
TechNova Infiltration
Moyen
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Simple Directory Traversal
Défi
Directory TraversalPath InjectionFile System SecurityWeb SecurityInput ValidationPath ManipulationFile Access
SSRF Validator
Défi
SSRFWeb SecurityURL ManipulationInternal Network AccessProtocol Bypass
Spoof!
Facile
IP SPOOFING
Include me
Facile
PHPLFI
Shadow Cracker
Défi
Password CrackingLinux SecurityJohn the RipperhashcatCryptography
Linux Fundamentals Practice
Défi
LinuxCommand LineFile System NavigationHidden Filesgrepfind
Alpwned
Moyen
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
Internal
Difficile
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
Compromised 1
Moyen
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Matsudo
Moyen
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Hidden CMS Breach
Moyen
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
FiPloit
Facile
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Anonymous 2
Facile
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Anonymous
Facile
FTP
Secrets in Source 2
Très Facile
Web SecurityHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning Path
Hack the Cookie
Très Facile
WEBLearning Path
Hack the Login
Très Facile
WebAuthenticationClient-Side SecurityLearning Path
Nmap Lab 102
Très Facile
TELNETLearning Path
Secrets in Source
Très Facile
HTMLLearning Path
Onboarding Lab: Access and Flags
Très Facile
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Progression des Cours
Vos parcours d'apprentissage et modules