kevine
✦ Legend ✦
En ligne
Ranked #2 worldwide with 151 flags captured. I break things professionally, then explain how to fix them.
Activité
31 jours actifs sur la dernière année
Moins
Plus
Progression de Rang
✦ Legend ✦
Rang Maximum
Accomplissements
Premier Sang
Série Débutant
Maître de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
Membre Pro
Server-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb SecurityLDAP InjectionAuthentication BypassDirectory ServicesEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationNoSQL InjectionMongoDBDocument DatabasesSUID BinariesPrivilege EscalationCommand InjectionLinux SecurityBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationGraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjectionJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityJWTCookie ManipulationLocal File InclusionFilter BypassApache AuthenticationPassword CrackingDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentHTTP HeadersSecurity BypassWeb Application SecurityClient-Side ManipulationCryptographyClassical CiphersFrequency AnalysisPattern RecognitionNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisIDORParameter ManipulationVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationUser-Agent Log PoisoningDirectory TraversalApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationPDF SecurityDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksJinja2Web Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTMD5 CrackingSource Code AnalysisPassword AttacksHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingNetwork SecurityPacket AnalysisWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationIP SpoofingInformation GatheringFlaskDebug ModePythonMemory AnalysisLogic FlawPHPWeb ExploitationService DiscoveryToken AuthenticationAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationQR Code AnalysisImage AnalysisData ExtractionSteganographyWeb HackingLogic FlawsToken ManipulationBase64 EncodingCryptanalysisClassical CryptoData EncodingMemory ForensicsBinary AnalysisTool UsageData RecoveryROT13 EncodingNetwork ReconnaissanceDatabase ForensicsCLI UsageBase64Hex EncodingRedisJenkinsCI/CDDevOpsPentestAutomationNetwork AnalysisDNSLFIPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLSBForensicsAudio AnalysisTransposition CipherRail FenceWeb InspectionHTML AnalysisWeb DevelopmentHexadecimalWebCTF BasicsPacket CaptureWiresharkProtocol AnalysisMD5Rainbow TablesHex EditorsData StructuresReverse EngineeringWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityFile AccessURL ManipulationInternal Network AccessProtocol BypassRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesPolyalphabetic CiphersEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationLinuxCommand LineFile System NavigationHidden FilesgrepfindHTTP ProtocolRequest SmugglingHash CrackingPassword AnalysisSecurity ToolsType JugglingHash AnalysisWeb EnumerationFile DiscoveryReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackWPCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationLinux CapabilitiesReverse ShellSystem EnumerationFilter EvasionFile Upload BypassPHP SecurityWeb Shell ExploitationJWT ManipulationSSH ExploitationLog InjectionSSHFile EnumerationCron JobsConfiguration AnalysisHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbuseHost Header InjectionPassword Reset PoisoningMass AssignmentPassword ReuseLinux Privilege EscalationMYSQLIRCESSTISSH Brute ForceDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraFile PermissionsApache TomcatWAR DeploymentDefault CredentialsSudoAuthenticationDeobfuscationCode AnalysisGITWEBPickle DeserializationPath TraversalAccess ControlSecurity Through ObscurityView SourceBroken Access ControlHTMLCommand Line ToolsAttack DetectionCGISession ManagementIP SPOOFINGFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPView Source CodeCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsNmapNmap CommandsTelnetPort ScanningBroken AuthenticationDeveloper ToolsLearning PathCookie PoisoningSession Tampering
Template Injector
Défi
LDAP Injector
Défi
Redis Cache Poisoner
Défi
MongoDB Injector
Défi
Registry Hijacker
Défi
GraphQL Gateway
Défi
Button Activator
Défi
Cookie Forge
Défi
File Include Bypass
Défi
Header Hijacker
Défi
Caesar Shift Decoder
Défi
IDOR Explorer
Défi
NoSQL Injection
Défi
LFI Log Poison
Défi
PDF Password Cracker
Défi
Template Injection
Défi
KeePass Breaker
Défi
ZIP Cracker
Défi
Git Secrets Hunter
Défi
Admin Portal Breach
Défi
Registry Hunter
Défi
WEP Cracker
Défi
IP Spoofing Admin
Défi
Flask Error
Défi
API Logic Flaw
Défi
Ping Pwn
Défi
JWT Bypass
Défi
JWT Algo Confusion
Défi
XXE Exposed
Défi
SQL Injection
Défi
XSS Playground
Défi
URL Scanner
Défi
File Upload Bypass
Défi
QR Code Quest
Défi
API Breaker
Défi
Crypto Cipher
Défi
Memory Forensics
Défi
Red is Dead
Défi
Snapchat Exposed
Défi
DNS Exfil
Défi
Corporate Breach
Défi
Corporate Breach 2
Défi
Blockchain Secrets
Défi
PDF Trap
Défi
Pixel Puzzler
Défi
Sonic Cipher
Défi
Rail Fence
Défi
Base64 Detective
Défi
Hex Hunt
Défi
Stego Hunt
Défi
Packet Pursuit
Défi
Get the Password
Défi
Binary Secrets
Défi
WebDAV Explorer
Défi
Test d'injection SQL
Défi
YAML Bomb
Défi
SSRF Validator
Défi
Vigenère Stego Hunt
Défi
HTTP Smuggling
Défi
Crack SHA1 Hash
Défi
Type Juggling Bypass
Défi
Backup Hunter
Défi
Git Exposed
Défi
Regex Bypass to SQLi
Défi
Shadow Cracker
Défi
Phantom Text
Défi
Fine Print
Défi
Token Trust
Défi
XOR Reuse
Défi
WP Ultimate
Difficile
CSRF Bank Transfer
Défi
Compromised 2
Difficile
Broken Chain
Difficile
Internal
Difficile
RCE Playground
Moyen
FiPloit
Facile
Infiltrator
Facile
Scheduled Sabotage
Facile
Host Hijack
Moyen
Query Quake
Moyen
FortiPy
Difficile
Hack the Box
Difficile
TechNova Infiltration
Moyen
Alpwned
Moyen
Compromised 1
Moyen
Hidden CMS Breach
Moyen
Hack This Site
Défi
Traversed
Moyen
AlVault
Moyen
Pickle Jar
Moyen
Auth Bypass
Défi
ClearDesk
Moyen
Log Hunter
Défi
Path Traversal
Défi
Beyond Echo
Moyen
Session Switch
Défi
Matsudo
Moyen
Cronpocalypse
Facile
Spoof!
Facile
Include me
Facile
Anonymous 2
Facile
Anonymous
Facile
Hack the Login
Très Facile
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Fondamentaux du privesc Linux
Détournement de PATH
Énumération manuelle
Durcissement Linux
Abus de tâches cron
Évasions de conteneurs
Exploitation SUID
Énumération automatisée
Abus de sudo
Exploits kernel
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Intro Sécurité Web
Fondamentaux du SOC
Analyse de logs par requêtes
Sources de logs et SIEM
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Daily Hack Solved
- Same handle everywhere
+10 XP
20 hours ago
Daily Hack Solved
- CloudTrail anomaly
+10 XP
1 day ago
Daily Hack Solved
- Vigenere then base64
+10 XP
2 days ago
Daily Hack Solved
- Read the JWT claim
+10 XP
4 days ago
Daily Hack Solved
- Find the hardcoded API key
+10 XP
5 days ago
Daily Hack Solved
- The GPG blob
+10 XP
5 days ago
Daily Hack Solved
- Hex back to text
+10 XP
6 days ago
Daily Hack Solved
- The hidden link
+10 XP
1 week ago
Daily Hack Solved
- Flip the debug flag
+10 XP
1 week ago
Daily Hack Solved
- Read the shell history
+10 XP
1 week ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 week ago
Daily Hack Solved
- Trace the port scan
+10 XP
1 week ago
Chapter Completed
- Analyse de logs par requêtes
+1 XP
1 week ago
Chapter Completed
- Sources de logs et SIEM
+1 XP
1 week ago
Flag Found
- Template Injector
+50 XP
1 week ago
Flag Found
- LDAP Injector
+50 XP
1 week ago
Flag Found
- Redis Cache Poisoner
+50 XP
1 week ago
Flag Found
- MongoDB Injector
+50 XP
1 week ago
Flag Found
- SUID Privilege Hunter
+50 XP
1 week ago
Flag Found
- Registry Hijacker
+50 XP
1 week ago
Flag Found
- GraphQL Gateway
+50 XP
1 week ago
Flag Found
- Button Activator
+50 XP
1 week ago
Flag Found
- Cookie Forge
+50 XP
1 week ago
Flag Found
- File Include Bypass
+50 XP
1 week ago
Flag Found
- Corporate Directory Hunt
+50 XP
1 week ago
Flag Found
- Header Hijacker
+50 XP
1 week ago
Flag Found
- Caesar Shift Decoder
+50 XP
1 week ago
Flag Found
- DNS Tunneling Detective
+50 XP
1 week ago
Flag Found
- IDOR Explorer
+50 XP
1 week ago
Flag Found
- NoSQL Injection
+50 XP
1 week ago
Flag Found
- LFI Log Poison
+50 XP
1 week ago
Flag Found
- Shell Command Scanner
+50 XP
1 week ago
Flag Found
- PDF Password Cracker
+50 XP
1 week ago
Flag Found
- Template Injection
+50 XP
1 week ago
Flag Found
- KeePass Breaker
+50 XP
1 week ago
Flag Found
- ZIP Cracker
+50 XP
1 week ago
Flag Found
- Corporate Backup Deserializer
+50 XP
1 week ago
Flag Found
- Git Secrets Hunter
+50 XP
1 week ago
Flag Found
- Admin Portal Breach
+50 XP
1 week ago
Flag Found
- Book Cipher Challenge
+50 XP
1 week ago
Flag Found
- WiFi Password Cracker
+50 XP
1 week ago
Flag Found
- Registry Hunter
+50 XP
1 week ago
Flag Found
- WEP Cracker
+50 XP
1 week ago
Flag Found
- IP Spoofing Admin
+50 XP
1 week ago
Flag Found
- Flask Error
+50 XP
1 week ago
Flag Found
- API Logic Flaw
+50 XP
1 week ago
Flag Found
- Ping Pwn
+50 XP
1 week ago
Flag Found
- JWT Bypass
+50 XP
1 week ago
Flag Found
- JWT Algo Confusion
+50 XP
1 week ago
Flag Found
- XXE Exposed
+50 XP
1 week ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat