Ichiko
✦ Legend ✦
En ligne
I break systems legally and rank in the top 70 worldwide. Senior hacker from the Philippines with 23 flags and counting.
Activité
99 jours actifs sur la dernière année
Moins
Plus
Progression de Rang
✦ Legend ✦
Rang Maximum
Accomplissements
Série Débutant
Maître de la Série
Légende de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationJWTWeb SecurityToken AuthenticationCryptographyAlgorithm ConfusionRS256HS256Token ForgeryNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisCommand InjectionShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity AssessmentWireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol ExploitationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementReverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraSession ManagementAuthenticationPHPLFIPassword CrackingAuthentication BypassDirectory TraversalQR Code AnalysisImage AnalysisData ExtractionSteganographyDigital ForensicsDNSData ExfiltrationBase64 DecodingCryptanalysisClassical CryptoPattern RecognitionData EncodingJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsJenkinsCI/CDDevOpsPentestAutomationMD5Rainbow TablesNetwork ReconnaissanceService DiscoveryDatabase ForensicsCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisWeb InspectionHTML AnalysisAPI SecurityWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLSBForensicsPythonAudio AnalysisTransposition CipherRail FenceFlaskDebug ModeMemory AnalysisPath TraversalCGIFile AccessInput ValidationLogic FlawParameter ManipulationWeb ExploitationNetwork SecuritySQL InjectionDatabase SecurityXSSCross-Site ScriptingStored XSSSession HijackingClient-Side SecurityDOM ManipulationClaims ManipulationTime-Based AttacksSignature CrackingLocal File InclusionUser-Agent Log PoisoningRemote Code ExecutionApache SecurityLog AnalysisXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsPost ExploitationNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationPDF SecurityDictionary AttacksDocument SecurityBrute Force AttacksServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsWebCTF BasicsMemory ForensicsTool UsageROT13 EncodingHex EditorsData StructuresMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksClassical CiphersHistorical CryptanalysisWindows RegistryPersistence AnalysisMalware AnalysisHTTP HeadersIP SpoofingInformation GatheringJinja2 ExploitationFile DiscoveryCommand Line ToolsHTTP ProtocolAttack DetectionLDAP InjectionDirectory ServicesEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDocument DatabasesZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksWiFi SecurityWPA CrackingWireless Penetration TestingDeobfuscationCode AnalysisGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTSUID BinariesLinux SecurityBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFrequency AnalysisNetwork ForensicsDNS AnalysisTraffic AnalysisGraphQLSchema IntrospectionInjectionCookie ManipulationFilter BypassApache AuthenticationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity BypassClient-Side ManipulationIDORRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityPolyalphabetic CiphersURL ManipulationInternal Network AccessProtocol BypassEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationRequest SmugglingHash CrackingPassword AnalysisSecurity ToolsType JugglingHash AnalysisWeb EnumerationReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatLinuxCommand LineFile System NavigationHidden FilesgrepfindUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationWPAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationSSHFilter EvasionApache TomcatWAR DeploymentDefault CredentialsSudoLinux CapabilitiesReverse ShellSystem EnumerationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationMass AssignmentPassword ReuseLinux Privilege EscalationMYSQLIRCEJWT ManipulationSSH ExploitationLog InjectionFile EnumerationCron JobsConfiguration AnalysisHeadless CMSInformation DisclosureRevision HistoryToken AbuseSSTISSH Brute ForcePickle DeserializationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperWEBFile PermissionsHost Header InjectionPassword Reset PoisoningGITAccess ControlIP SPOOFINGFTPFile Upload BypassPHP SecurityWeb Shell ExploitationView Source CodeHTMLBroken Access ControlCookie PoisoningSession TamperingNmapNmap CommandsTelnetPort ScanningSecurity Through ObscurityView SourceBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
JWT Bypass
Défi
JWT Algo Confusion
Défi
Packet Pursuit
Défi
WEP Cracker
Défi
CSRF Bank Transfer
Défi
Session Switch
Défi
Corporate Breach
Défi
QR Code Quest
Défi
DNS Exfil
Défi
Crypto Cipher
Défi
Hex Hunt
Défi
Snapchat Exposed
Défi
Get the Password
Défi
Red is Dead
Défi
Base64 Detective
Défi
API Breaker
Défi
Corporate Breach 2
Défi
Blockchain Secrets
Défi
PDF Trap
Défi
Pixel Puzzler
Défi
Sonic Cipher
Défi
Rail Fence
Défi
Flask Error
Défi
Path Traversal
Défi
API Logic Flaw
Défi
Ping Pwn
Défi
Auth Bypass
Défi
XSS Playground
Défi
LFI Log Poison
Défi
XXE Exposed
Défi
SQL Injection
Défi
URL Scanner
Défi
File Upload Bypass
Défi
NoSQL Injection
Défi
PDF Password Cracker
Défi
Template Injection
Défi
KeePass Breaker
Défi
Stego Hunt
Défi
Memory Forensics
Défi
Binary Secrets
Défi
Admin Portal Breach
Défi
Registry Hunter
Défi
IP Spoofing Admin
Défi
Template Injector
Défi
Log Hunter
Défi
LDAP Injector
Défi
Redis Cache Poisoner
Défi
MongoDB Injector
Défi
ZIP Cracker
Défi
Hack This Site
Défi
Git Secrets Hunter
Défi
Registry Hijacker
Défi
Caesar Shift Decoder
Défi
GraphQL Gateway
Défi
Button Activator
Défi
Cookie Forge
Défi
File Include Bypass
Défi
Header Hijacker
Défi
IDOR Explorer
Défi
WebDAV Explorer
Défi
YAML Bomb
Défi
Vigenère Stego Hunt
Défi
SSRF Validator
Défi
HTTP Smuggling
Défi
Crack SHA1 Hash
Défi
Type Juggling Bypass
Défi
Backup Hunter
Défi
Git Exposed
Défi
Regex Bypass to SQLi
Défi
Shadow Cracker
Défi
Test d'injection SQL
Défi
Phantom Text
Défi
Fine Print
Défi
Token Trust
Défi
XOR Reuse
Défi
Broken Chain
Difficile
WP Ultimate
Difficile
Compromised 2
Difficile
TechNova Infiltration
Moyen
RCE Playground
Moyen
Compromised 1
Moyen
Matsudo
Moyen
Internal
Difficile
Anonymous 2
Facile
Query Quake
Moyen
Infiltrator
Facile
Scheduled Sabotage
Facile
FortiPy
Difficile
Pickle Jar
Moyen
Hack the Box
Difficile
AlVault
Moyen
Alpwned
Moyen
Hidden CMS Breach
Moyen
Host Hijack
Moyen
Traversed
Moyen
ClearDesk
Moyen
Beyond Echo
Moyen
Cronpocalypse
Facile
Spoof!
Facile
Anonymous
Facile
FiPloit
Facile
Include me
Facile
Hack the Login
Très Facile
Pipes et pipelines de données
Utilisateurs, groupes et permissions
Navigation dans le système de fichiers
Gestion des processus
Recherche de ce qui compte
Lecture et manipulation de fichiers
Votre première session terminal
Commandes réseau
L'état d'esprit du hacker
Actif pendant 1 jours
14 hours ago
Daily Hack Solved
- Count the layers
+10 XP
1 day ago
Daily Hack Solved
- The total you do not see
+10 XP
2 days ago
Daily Hack Solved
- How long does it live
+10 XP
4 days ago
Daily Hack Solved
- The alibi that breaks
+10 XP
5 days ago
Daily Hack Solved
- Recover the XOR key
+10 XP
5 days ago
Daily Hack Solved
- Find the safe one
+10 XP
6 days ago
Daily Hack Solved
- Repair the magic bytes
+10 XP
1 week ago
Daily Hack Solved
- Count the compromised
+10 XP
1 week ago
Daily Hack Solved
- The version that leaks
+10 XP
1 week ago
Daily Hack Solved
- When did the backups die
+10 XP
1 week ago
Daily Hack Solved
- Follow the ransom BTC
+10 XP
1 week ago
Daily Hack Solved
- Single-byte XOR
+10 XP
1 week ago
Daily Hack Solved
- Who pulled the keys
+10 XP
2 weeks ago
Daily Hack Solved
- PEM, not JPG
+10 XP
2 weeks ago
Daily Hack Solved
- A token you can read
+10 XP
2 weeks ago
Daily Hack Solved
- Disabled but shipped
+10 XP
2 weeks ago
Daily Hack Solved
- Find the IAM privilege escalation
+10 XP
2 weeks ago
Actif pendant 1 jours
2 weeks ago
Daily Hack Solved
- Find the leaked AWS key
+10 XP
2 weeks ago
Daily Hack Solved
- Replay the withdrawal
+10 XP
2 weeks ago
Daily Hack Solved
- Who got root
+10 XP
3 weeks ago
Daily Hack Solved
- Read the system prompt
+10 XP
3 weeks ago
Daily Hack Solved
- Reverse then ROT
+10 XP
3 weeks ago
Daily Hack Solved
- ELF, not data
+10 XP
3 weeks ago
Daily Hack Solved
- Forge the group claim
+10 XP
3 weeks ago
Daily Hack Solved
- The webview endpoint
+10 XP
3 weeks ago
Daily Hack Solved
- Find the reentrancy bug
+10 XP
3 weeks ago
Daily Hack Solved
- Two layers, one flag
+10 XP
4 weeks ago
Daily Hack Solved
- SSRF to the internal KV store
+10 XP
4 weeks ago
Daily Hack Solved
- Open the app sandbox
+10 XP
4 weeks ago
Daily Hack Solved
- Find the SQLi probe
+10 XP
1 month ago
Daily Hack Solved
- Find the employer
+10 XP
1 month ago
Daily Hack Solved
- Decrypt the ransom note
+10 XP
1 month ago
Daily Hack Solved
- The token names the host
+10 XP
1 month ago
Daily Hack Solved
- Find the tool-exec RCE sink
+10 XP
1 month ago
Daily Hack Solved
- PNG, not TXT
+10 XP
1 month ago
Daily Hack Solved
- Find the hidden email
+10 XP
1 month ago
Daily Hack Solved
- Decode the beacon label
+10 XP
1 month ago
Flag Found
- Attaque SSRF : voler les identifiants des métadonnées cloud
+200 XP
1 month ago
Flag Found
- Attaque SSRF : voler les identifiants des métadonnées cloud
+200 XP
1 month ago
Actif pendant 1 jours
1 month ago
Daily Hack Solved
- Vigenere then base64
+10 XP
1 month ago
Daily Hack Solved
- The GPG blob
+10 XP
1 month ago
Daily Hack Solved
- Hex back to text
+10 XP
1 month ago
Daily Hack Solved
- Read the shell history
+10 XP
1 month ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 month ago
Daily Hack Solved
- Trace the port scan
+10 XP
1 month ago
Daily Hack Solved
- Unwrap the C2 beacon
+10 XP
1 month ago
Daily Hack Solved
- Forge the tier
+10 XP
1 month ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat