kevine
Grandmaster
Ranked #2 worldwide with 151 flags captured. I break things professionally, then explain how to fix them.
Activité
75 jours actifs sur la dernière année
Moins
Plus
Progression de Rang
Grandmaster
✦ Legend ✦
17848 / 18034 XP
Accomplissements
Premier Sang
Série Débutant
Maître de la Série
Légende de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationServer-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb SecurityLDAP InjectionAuthentication BypassDirectory ServicesEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationNoSQL InjectionMongoDBDocument DatabasesSUID BinariesCommand InjectionLinux SecurityBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationGraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjectionJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityJWTCookie ManipulationLocal File InclusionFilter BypassApache AuthenticationPassword CrackingDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentHTTP HeadersSecurity BypassWeb Application SecurityClient-Side ManipulationCryptographyClassical CiphersFrequency AnalysisPattern RecognitionNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisIDORParameter ManipulationVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationUser-Agent Log PoisoningDirectory TraversalApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationPDF SecurityDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksJinja2Web Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTMD5 CrackingSource Code AnalysisPassword AttacksHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingNetwork SecurityPacket AnalysisWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationIP SpoofingInformation GatheringFlaskDebug ModePythonMemory AnalysisLogic FlawPHPWeb ExploitationService DiscoveryToken AuthenticationAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationQR Code AnalysisImage AnalysisData ExtractionSteganographyWeb HackingLogic FlawsToken ManipulationBase64 EncodingCryptanalysisClassical CryptoData EncodingMemory ForensicsBinary AnalysisTool UsageData RecoveryROT13 EncodingNetwork ReconnaissanceDatabase ForensicsCLI UsageBase64Hex EncodingRedisJenkinsCI/CDDevOpsPentestAutomationNetwork AnalysisDNSLFIPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLSBForensicsAudio AnalysisTransposition CipherRail FenceWeb InspectionHTML AnalysisWeb DevelopmentHexadecimalWebCTF BasicsPacket CaptureWiresharkProtocol AnalysisMD5Rainbow TablesHex EditorsData StructuresReverse EngineeringWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityFile AccessURL ManipulationInternal Network AccessProtocol BypassRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesPolyalphabetic CiphersEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationLinuxCommand LineFile System NavigationHidden FilesgrepfindHTTP ProtocolRequest SmugglingHash CrackingPassword AnalysisSecurity ToolsType JugglingHash AnalysisWeb EnumerationFile DiscoveryReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackWPCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationLinux CapabilitiesReverse ShellSystem EnumerationFilter EvasionFile Upload BypassPHP SecurityWeb Shell ExploitationJWT ManipulationSSH ExploitationLog InjectionSSHFile EnumerationCron JobsConfiguration AnalysisHeadless CMSInformation DisclosureRevision HistoryToken AbuseHost Header InjectionPassword Reset PoisoningMass AssignmentPassword ReuseLinux Privilege EscalationMYSQLIRCESSTISSH Brute ForceDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraFile PermissionsApache TomcatWAR DeploymentDefault CredentialsSudoAuthenticationDeobfuscationCode AnalysisGITWEBPickle DeserializationPath TraversalAccess ControlSecurity Through ObscurityView SourceBroken Access ControlHTMLCommand Line ToolsAttack DetectionCGISession ManagementIP SPOOFINGFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPView Source CodeCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsNmapNmap CommandsTelnetPort ScanningBroken AuthenticationDeveloper ToolsLearning PathCookie PoisoningSession Tampering
Template Injector
Défi
LDAP Injector
Défi
Redis Cache Poisoner
Défi
MongoDB Injector
Défi
Registry Hijacker
Défi
GraphQL Gateway
Défi
Button Activator
Défi
Cookie Forge
Défi
File Include Bypass
Défi
Header Hijacker
Défi
Caesar Shift Decoder
Défi
IDOR Explorer
Défi
NoSQL Injection
Défi
LFI Log Poison
Défi
PDF Password Cracker
Défi
Template Injection
Défi
KeePass Breaker
Défi
ZIP Cracker
Défi
Git Secrets Hunter
Défi
Admin Portal Breach
Défi
Registry Hunter
Défi
WEP Cracker
Défi
IP Spoofing Admin
Défi
Flask Error
Défi
API Logic Flaw
Défi
Ping Pwn
Défi
JWT Bypass
Défi
JWT Algo Confusion
Défi
XXE Exposed
Défi
SQL Injection
Défi
XSS Playground
Défi
URL Scanner
Défi
File Upload Bypass
Défi
QR Code Quest
Défi
API Breaker
Défi
Crypto Cipher
Défi
Memory Forensics
Défi
Red is Dead
Défi
Snapchat Exposed
Défi
DNS Exfil
Défi
Corporate Breach
Défi
Corporate Breach 2
Défi
Blockchain Secrets
Défi
PDF Trap
Défi
Pixel Puzzler
Défi
Sonic Cipher
Défi
Rail Fence
Défi
Base64 Detective
Défi
Hex Hunt
Défi
Stego Hunt
Défi
Packet Pursuit
Facile
Get the Password
Défi
Binary Secrets
Défi
WebDAV Explorer
Défi
Test d'injection SQL
Défi
YAML Bomb
Défi
SSRF Validator
Défi
Vigenère Stego Hunt
Défi
HTTP Smuggling
Défi
Crack SHA1 Hash
Défi
Type Juggling Bypass
Défi
Backup Hunter
Défi
Git Exposed
Défi
Regex Bypass to SQLi
Défi
Shadow Cracker
Défi
Phantom Text
Défi
Fine Print
Défi
Token Trust
Défi
XOR Reuse
Défi
WP Ultimate
Difficile
CSRF Bank Transfer
Défi
Compromised 2
Difficile
Broken Chain
Difficile
Internal
Difficile
RCE Playground
Moyen
FiPloit
Facile
Infiltrator
Facile
Scheduled Sabotage
Facile
Host Hijack
Moyen
Query Quake
Moyen
FortiPy
Difficile
Hack the Box
Difficile
TechNova Infiltration
Moyen
Alpwned
Moyen
Compromised 1
Moyen
Hidden CMS Breach
Moyen
Hack This Site
Défi
Traversed
Moyen
AlVault
Moyen
Pickle Jar
Moyen
Auth Bypass
Défi
ClearDesk
Moyen
Log Hunter
Défi
Path Traversal
Défi
Beyond Echo
Moyen
Session Switch
Défi
Matsudo
Moyen
Cronpocalypse
Facile
Spoof!
Facile
Include me
Facile
Anonymous 2
Facile
Anonymous
Facile
Hack the Login
Très Facile
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Fondamentaux du privesc Linux
Détournement de PATH
Énumération manuelle
Durcissement Linux
Abus de tâches cron
Évasions de conteneurs
Exploitation SUID
Énumération automatisée
Abus de sudo
Exploits kernel
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Intro Sécurité Web
Fondamentaux du SOC
Analyse de logs par requêtes
Sources de logs et SIEM
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Streak Frozen
4 days ago
Streak Frozen
5 days ago
Streak Frozen
6 days ago
Streak Frozen
1 week ago
Actif pendant 1 jours
1 week ago
Streak Frozen
1 week ago
Actif pendant 1 jours
1 week ago
Streak Frozen
1 week ago
Streak Frozen
1 week ago
Streak Frozen
1 week ago
Streak Frozen
2 weeks ago
Actif pendant 1 jours
2 weeks ago
Daily Hack Solved
- The canary build
+10 XP
2 weeks ago
Daily Hack Solved
- The gateway that appeared
+10 XP
2 weeks ago
Streak Frozen
2 weeks ago
Actif pendant 2 jours
2 weeks ago
Daily Hack Solved
- Count the layers
+10 XP
3 weeks ago
Daily Hack Solved
- The total you do not see
+10 XP
3 weeks ago
Actif pendant 1 jours
3 weeks ago
Daily Hack Solved
- The alibi that breaks
+10 XP
3 weeks ago
Daily Hack Solved
- Recover the XOR key
+10 XP
3 weeks ago
Daily Hack Solved
- Find the safe one
+10 XP
3 weeks ago
Daily Hack Solved
- Repair the magic bytes
+10 XP
3 weeks ago
Daily Hack Solved
- Count the compromised
+10 XP
4 weeks ago
Daily Hack First Blood
- Count the compromised
+10 XP
4 weeks ago
Daily Hack Solved
- The version that leaks
+10 XP
4 weeks ago
Daily Hack Solved
- When did the backups die
+10 XP
1 month ago
Daily Hack Solved
- Follow the ransom BTC
+10 XP
1 month ago
Actif pendant 1 jours
1 month ago
Daily Hack Solved
- Who pulled the keys
+10 XP
1 month ago
Daily Hack Solved
- PEM, not JPG
+10 XP
1 month ago
Daily Hack Solved
- A token you can read
+10 XP
1 month ago
Daily Hack Solved
- Disabled but shipped
+10 XP
1 month ago
Daily Hack Solved
- Find the IAM privilege escalation
+10 XP
1 month ago
Daily Hack Solved
- Decode the stored credential
+10 XP
1 month ago
Daily Hack Solved
- Find the leaked AWS key
+10 XP
1 month ago
Daily Hack Solved
- Replay the withdrawal
+10 XP
1 month ago
Daily Hack Solved
- Who got root
+10 XP
1 month ago
Daily Hack Solved
- Read the system prompt
+10 XP
1 month ago
Daily Hack Solved
- Reverse then ROT
+10 XP
1 month ago
Daily Hack Solved
- ELF, not data
+10 XP
1 month ago
Daily Hack Solved
- Forge the group claim
+10 XP
1 month ago
Daily Hack Solved
- The webview endpoint
+10 XP
1 month ago
Daily Hack Solved
- Find the reentrancy bug
+10 XP
1 month ago
Daily Hack Solved
- Two layers, one flag
+10 XP
1 month ago
Daily Hack Solved
- SSRF to the internal KV store
+10 XP
1 month ago
Daily Hack Solved
- Open the app sandbox
+10 XP
1 month ago
Daily Hack Solved
- Find the SQLi probe
+10 XP
1 month ago
Daily Hack Solved
- Find the employer
+10 XP
1 month ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat