kevine
✦ Legend ✦
En ligne
Ranked #2 worldwide with 151 flags captured. I break things professionally, then explain how to fix them.
Activité
49 jours actifs sur la dernière année
Moins
Plus
Progression de Rang
✦ Legend ✦
Rang Maximum
Accomplissements
Premier Sang
Série Débutant
Maître de la Série
Légende de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationServer-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb SecurityLDAP InjectionAuthentication BypassDirectory ServicesEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationNoSQL InjectionMongoDBDocument DatabasesSUID BinariesCommand InjectionLinux SecurityBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationGraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjectionJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityJWTCookie ManipulationLocal File InclusionFilter BypassApache AuthenticationPassword CrackingDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentHTTP HeadersSecurity BypassWeb Application SecurityClient-Side ManipulationCryptographyClassical CiphersFrequency AnalysisPattern RecognitionNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisIDORParameter ManipulationVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationUser-Agent Log PoisoningDirectory TraversalApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationPDF SecurityDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksJinja2Web Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTMD5 CrackingSource Code AnalysisPassword AttacksHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingNetwork SecurityPacket AnalysisWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationIP SpoofingInformation GatheringFlaskDebug ModePythonMemory AnalysisLogic FlawPHPWeb ExploitationService DiscoveryToken AuthenticationAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationQR Code AnalysisImage AnalysisData ExtractionSteganographyWeb HackingLogic FlawsToken ManipulationBase64 EncodingCryptanalysisClassical CryptoData EncodingMemory ForensicsBinary AnalysisTool UsageData RecoveryROT13 EncodingNetwork ReconnaissanceDatabase ForensicsCLI UsageBase64Hex EncodingRedisJenkinsCI/CDDevOpsPentestAutomationNetwork AnalysisDNSLFIPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLSBForensicsAudio AnalysisTransposition CipherRail FenceWeb InspectionHTML AnalysisWeb DevelopmentHexadecimalWebCTF BasicsPacket CaptureWiresharkProtocol AnalysisMD5Rainbow TablesHex EditorsData StructuresReverse EngineeringWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityFile AccessURL ManipulationInternal Network AccessProtocol BypassRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesPolyalphabetic CiphersEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationLinuxCommand LineFile System NavigationHidden FilesgrepfindHTTP ProtocolRequest SmugglingHash CrackingPassword AnalysisSecurity ToolsType JugglingHash AnalysisWeb EnumerationFile DiscoveryReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackWPCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationLinux CapabilitiesReverse ShellSystem EnumerationFilter EvasionFile Upload BypassPHP SecurityWeb Shell ExploitationJWT ManipulationSSH ExploitationLog InjectionSSHFile EnumerationCron JobsConfiguration AnalysisHeadless CMSInformation DisclosureRevision HistoryToken AbuseHost Header InjectionPassword Reset PoisoningMass AssignmentPassword ReuseLinux Privilege EscalationMYSQLIRCESSTISSH Brute ForceDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraFile PermissionsApache TomcatWAR DeploymentDefault CredentialsSudoAuthenticationDeobfuscationCode AnalysisGITWEBPickle DeserializationPath TraversalAccess ControlSecurity Through ObscurityView SourceBroken Access ControlHTMLCommand Line ToolsAttack DetectionCGISession ManagementIP SPOOFINGFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPView Source CodeCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsNmapNmap CommandsTelnetPort ScanningBroken AuthenticationDeveloper ToolsLearning PathCookie PoisoningSession Tampering
Template Injector
Défi
LDAP Injector
Défi
Redis Cache Poisoner
Défi
MongoDB Injector
Défi
Registry Hijacker
Défi
GraphQL Gateway
Défi
Button Activator
Défi
Cookie Forge
Défi
File Include Bypass
Défi
Header Hijacker
Défi
Caesar Shift Decoder
Défi
IDOR Explorer
Défi
NoSQL Injection
Défi
LFI Log Poison
Défi
PDF Password Cracker
Défi
Template Injection
Défi
KeePass Breaker
Défi
ZIP Cracker
Défi
Git Secrets Hunter
Défi
Admin Portal Breach
Défi
Registry Hunter
Défi
WEP Cracker
Défi
IP Spoofing Admin
Défi
Flask Error
Défi
API Logic Flaw
Défi
Ping Pwn
Défi
JWT Bypass
Défi
JWT Algo Confusion
Défi
XXE Exposed
Défi
SQL Injection
Défi
XSS Playground
Défi
URL Scanner
Défi
File Upload Bypass
Défi
QR Code Quest
Défi
API Breaker
Défi
Crypto Cipher
Défi
Memory Forensics
Défi
Red is Dead
Défi
Snapchat Exposed
Défi
DNS Exfil
Défi
Corporate Breach
Défi
Corporate Breach 2
Défi
Blockchain Secrets
Défi
PDF Trap
Défi
Pixel Puzzler
Défi
Sonic Cipher
Défi
Rail Fence
Défi
Base64 Detective
Défi
Hex Hunt
Défi
Stego Hunt
Défi
Packet Pursuit
Défi
Get the Password
Défi
Binary Secrets
Défi
WebDAV Explorer
Défi
Test d'injection SQL
Défi
YAML Bomb
Défi
SSRF Validator
Défi
Vigenère Stego Hunt
Défi
HTTP Smuggling
Défi
Crack SHA1 Hash
Défi
Type Juggling Bypass
Défi
Backup Hunter
Défi
Git Exposed
Défi
Regex Bypass to SQLi
Défi
Shadow Cracker
Défi
Phantom Text
Défi
Fine Print
Défi
Token Trust
Défi
XOR Reuse
Défi
WP Ultimate
Difficile
CSRF Bank Transfer
Défi
Compromised 2
Difficile
Broken Chain
Difficile
Internal
Difficile
RCE Playground
Moyen
FiPloit
Facile
Infiltrator
Facile
Scheduled Sabotage
Facile
Host Hijack
Moyen
Query Quake
Moyen
FortiPy
Difficile
Hack the Box
Difficile
TechNova Infiltration
Moyen
Alpwned
Moyen
Compromised 1
Moyen
Hidden CMS Breach
Moyen
Hack This Site
Défi
Traversed
Moyen
AlVault
Moyen
Pickle Jar
Moyen
Auth Bypass
Défi
ClearDesk
Moyen
Log Hunter
Défi
Path Traversal
Défi
Beyond Echo
Moyen
Session Switch
Défi
Matsudo
Moyen
Cronpocalypse
Facile
Spoof!
Facile
Include me
Facile
Anonymous 2
Facile
Anonymous
Facile
Hack the Login
Très Facile
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Fondamentaux du privesc Linux
Détournement de PATH
Énumération manuelle
Durcissement Linux
Abus de tâches cron
Évasions de conteneurs
Exploitation SUID
Énumération automatisée
Abus de sudo
Exploits kernel
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Intro Sécurité Web
Fondamentaux du SOC
Analyse de logs par requêtes
Sources de logs et SIEM
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Daily Hack Solved
- Replay the withdrawal
+10 XP
2 hours ago
Daily Hack Solved
- Who got root
+10 XP
1 day ago
Daily Hack Solved
- Read the system prompt
+10 XP
2 days ago
Daily Hack Solved
- Reverse then ROT
+10 XP
3 days ago
Daily Hack Solved
- ELF, not data
+10 XP
4 days ago
Daily Hack Solved
- Forge the group claim
+10 XP
4 days ago
Daily Hack Solved
- The webview endpoint
+10 XP
5 days ago
Daily Hack Solved
- Find the reentrancy bug
+10 XP
1 week ago
Daily Hack Solved
- Two layers, one flag
+10 XP
1 week ago
Daily Hack Solved
- SSRF to the internal KV store
+10 XP
1 week ago
Daily Hack Solved
- Open the app sandbox
+10 XP
1 week ago
Daily Hack Solved
- Find the SQLi probe
+10 XP
1 week ago
Daily Hack Solved
- Find the employer
+10 XP
1 week ago
Daily Hack Solved
- Decrypt the ransom note
+10 XP
1 week ago
Daily Hack Solved
- The token names the host
+10 XP
2 weeks ago
Daily Hack Solved
- Find the tool-exec RCE sink
+10 XP
2 weeks ago
Daily Hack Solved
- PNG, not TXT
+10 XP
2 weeks ago
Daily Hack Solved
- Find the hidden email
+10 XP
2 weeks ago
Daily Hack Solved
- Decode the beacon label
+10 XP
2 weeks ago
Daily Hack Solved
- SSRF the cloud metadata
+10 XP
2 weeks ago
Daily Hack Solved
- Loot the instance role
+10 XP
2 weeks ago
Flag Found
- Attaque SSRF : voler les identifiants des métadonnées cloud
+200 XP
2 weeks ago
Flag Found
- Attaque SSRF : voler les identifiants des métadonnées cloud
+200 XP
2 weeks ago
Daily Hack Solved
- Same handle everywhere
+10 XP
2 weeks ago
Daily Hack Solved
- CloudTrail anomaly
+10 XP
3 weeks ago
Daily Hack Solved
- Vigenere then base64
+10 XP
3 weeks ago
Daily Hack Solved
- Read the JWT claim
+10 XP
3 weeks ago
Daily Hack Solved
- Find the hardcoded API key
+10 XP
3 weeks ago
Daily Hack Solved
- The GPG blob
+10 XP
3 weeks ago
Daily Hack Solved
- Hex back to text
+10 XP
3 weeks ago
Daily Hack Solved
- The hidden link
+10 XP
4 weeks ago
Daily Hack Solved
- Flip the debug flag
+10 XP
4 weeks ago
Daily Hack Solved
- Read the shell history
+10 XP
4 weeks ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 month ago
Daily Hack Solved
- Trace the port scan
+10 XP
1 month ago
Chapter Completed
- Analyse de logs par requêtes
+1 XP
1 month ago
Chapter Completed
- Sources de logs et SIEM
+1 XP
1 month ago
Flag Found
- Template Injector
+50 XP
1 month ago
Flag Found
- LDAP Injector
+50 XP
1 month ago
Flag Found
- Redis Cache Poisoner
+50 XP
1 month ago
Flag Found
- MongoDB Injector
+50 XP
1 month ago
Flag Found
- SUID Privilege Hunter
+50 XP
1 month ago
Flag Found
- Registry Hijacker
+50 XP
1 month ago
Flag Found
- GraphQL Gateway
+50 XP
1 month ago
Flag Found
- Button Activator
+50 XP
1 month ago
Flag Found
- Cookie Forge
+50 XP
1 month ago
Flag Found
- File Include Bypass
+50 XP
1 month ago
Flag Found
- Corporate Directory Hunt
+50 XP
1 month ago
Flag Found
- Header Hijacker
+50 XP
1 month ago
Flag Found
- Caesar Shift Decoder
+50 XP
1 month ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat