r3dkzyoud En ligne
✦ Legend ✦
Classement
#2
Meilleur: #1
Points Totaux
1623
Total Gagné
Labs Terminés
116
118 User • 19 Root
Modules
63
Validés
Premiers Sangs
13
Premier à Terminer
Meilleure Série
38
Jours
Compétences Acquises
Compétences techniques pratiquées à travers les labs terminés
LinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration AnalysisCommand LineFile System NavigationHidden FilesgrepfindDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBWeb EnumerationAuthenticationRCEHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning PathPassword CrackingLinux SecurityJohn the RipperhashcatCryptographyCVE ExploitationWindows SecurityNTLMHashcatHash AnalysisOffice SecurityHash ExtractionSQL InjectionRegex BypassInput ValidationWeb Application SecuritySQLiteUNION-Based SQLiGitVersion ControlReconnaissanceFile DiscoveryInformation GatheringPHPType JugglingAuthentication BypassHash CrackingPassword AnalysisSecurity ToolsDatabase SecurityPenetration TestingJavaScriptDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisSSRFURL ManipulationInternal Network AccessProtocol BypassEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSTIFlask SecuritySSH Brute ForceDatabase EnumerationSteganographyClassical CiphersImage AnalysisPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRace ConditionsTiming AttacksConcurrent ExploitationIDORParameter ManipulationAuthorization BypassJWTCookie ManipulationGraphQLSchema IntrospectionInjectionDOM ManipulationHTTP HeadersSecurity BypassClient-Side ManipulationLocal File InclusionFilter BypassApache AuthenticationLDAP InjectionDirectory ServicesEnterprise SecurityServer-Side Template InjectionJinja2 ExploitationWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentDNS AnalysisData ExfiltrationIP SpoofingAccess Control BypassDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFrequency AnalysisPattern RecognitionSUID BinariesNoSQL InjectionMongoDBDocument DatabasesJWT ManipulationSSH ExploitationLog InjectionFilter EvasionWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationDigital ForensicsWindows RegistryPersistence AnalysisIncident ResponseMalware AnalysisHistorical CryptanalysisMD5 CrackingPassword AttacksPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationVisibility ControlsSecurity TestingOperator ExploitationBypass TechniquesWeb ShellsSocial EngineeringPost ExploitationWPLinux CapabilitiesReverse ShellSystem EnumerationNetwork ReconnaissanceCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2Linux Privilege EscalationFile PermissionsXSSCross-Site ScriptingStored XSSSession HijackingClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityAlgorithm ConfusionRS256HS256Token ForgeryToken AuthenticationWeb ExploitationService DiscoveryCommand Line ToolsForensicsAttack DetectionLFIFile InclusionAudio AnalysisLSBPythonTransposition CipherRail FenceFlaskDebug ModeMemory AnalysisPath TraversalCGILogic FlawPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisNetwork AnalysisDNSCryptanalysisClassical CryptoData EncodingSession ManagementJenkinsCI/CDDevOpsPentestAutomationDatabase ForensicsCLI UsageData RecoveryBase64Hex EncodingRedisAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationMemory ForensicsBinary AnalysisTool UsageROT13 EncodingWeb HackingLogic FlawsToken ManipulationBase64 EncodingQR Code AnalysisMYSQLIWeb DevelopmentHexadecimalPacket CaptureWiresharkProtocol AnalysisWebCTF BasicsMD5Rainbow TablesHex EditorsData StructuresReverse EngineeringWEBWeb InspectionHTML AnalysisFile Upload BypassPHP SecurityWeb Shell ExploitationApache TomcatWAR DeploymentDefault CredentialsSudoGITFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGFTPNetworkingWeb ServicesTELNET
Modules Terminés
Modules éducatifs validés avec succès
Nmap Mastery: Dominate Network Scanning
4 modulesInstalling Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
HTTP Header Manipulation: IP Spoofing
3 modulesRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Cassage de Mots de Passe
10 modulesRainbow tables
Cassage sans fil
Cassage de PDF
Cassage de hashes Linux
Cassage de Documents Office
Cassage de ZIP
Attaques par force brute
Fondamentaux des mots de passe
Attaques par dictionnaire
Cassage de hashes Windows
Élévation de Privilèges Linux
2 modulesBases du privesc Linux
Énumération manuelle
Pentest Réseau
10 modulesReconnaissance active
Post-exploitation
Pivotement
Exploitation de services
Rapports de pentest
Attaques de mots de passe
Attaques MITM
Scan de vulnérabilités
Fondamentaux réseau
Énumération de services
Aide-Mémoire Sécurité
10 modulesAide-Mémoire Hydra
Aide-Mémoire Nikto
Aide-Mémoire John the Ripper
Aide-Mémoire SQLMap
Aide-Mémoire Wireshark
Aide-Mémoire Burp Suite
Aide-Mémoire Gobuster
Aide-Mémoire Nmap
Aide-Mémoire Hashcat
Aide-Mémoire Metasploit
HDNA Ethical Hacking Course
5 modules1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Attaques Web
12 modulesAttaques CSRF
Injection XXE
SSRF
Inclusion de Fichiers
Intro Sécurité Web
SSTI
Désérialisation
Attaques File Upload
Attaques XSS
Bypass Auth
Injection SQL
Injection de Commandes
Attaques JWT
4 modulesBases du JWT
Falsification JWT
Craquage JWT
Confusion d'Algorithme
Remote Code Execution (RCE)
3 modulesShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Labs & Défis Terminés
Défis pratiques de cybersécurité terminés avec succès
Scheduled Sabotage
Facile
LinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration Analysis
Linux Fundamentals Practice
Défi
LinuxCommand LineFile System NavigationHidden Filesgrepfind
Hack the Box
Difficile
Directory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDB
Hidden CMS Breach
Moyen
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
Secrets in Source 2
Très Facile
Web SecurityHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning Path
Shadow Cracker
Défi
Password CrackingLinux SecurityJohn the RipperhashcatCryptography
TechNova Infiltration
Moyen
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Windows Password Cracker
Défi
Password CrackingWindows SecurityNTLMHashcatJohn the RipperHash Analysis
Office Password Cracker
Défi
Password CrackingOffice SecurityHash ExtractionJohn the RipperHashcat
Regex Bypass to SQLi
Défi
SQL InjectionRegex BypassInput ValidationWeb Application SecuritySQLiteUNION-Based SQLi
Git Exposed
Défi
GitVersion ControlSource Code AnalysisReconnaissanceWeb Security
Backup Hunter
Défi
Web EnumerationFile DiscoveryReconnaissanceInformation Gathering
Type Juggling Bypass
Défi
Web SecurityPHPType JugglingAuthentication BypassHash Analysis
Crack SHA1 Hash
Défi
CryptographyHash CrackingPassword AnalysisSecurity Tools
SQL Injection Test
Défi
SQL InjectionWeb SecurityDatabase SecurityAuthentication BypassInput ValidationPenetration Testing
Hack This Site
Défi
JavaScriptDeobfuscationClient-Side SecurityBrowser DevToolsCode AnalysisAuthentication Bypass
HTTP Smuggling
Défi
HTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisWeb SecurityPacket Analysis
SSRF Validator
Défi
SSRFWeb SecurityURL ManipulationInternal Network AccessProtocol Bypass
Email Header Forensics
Défi
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
FortiPy
Difficile
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
Vigenere Stego Hunt
Défi
CryptographySteganographyClassical CiphersImage AnalysisPolyalphabetic Ciphers
Simple Directory Traversal
Défi
Directory TraversalPath InjectionFile System SecurityWeb SecurityInput ValidationPath ManipulationFile Access
YAML Bomb
Défi
YAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing Security
WebDAV Explorer
Défi
WebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System Enumeration
Prototype Pollution Hunter
Défi
Prototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web Vulnerabilities
Race Condition Hunter
Défi
Race ConditionsTiming AttacksConcurrent ExploitationWeb Application Security
IDOR Explorer
Défi
IDORParameter ManipulationWeb Application SecurityAuthorization Bypass
Cookie Forge
Défi
JWTCookie ManipulationAuthentication BypassPrivilege Escalation
GraphQL Gateway
Défi
GraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjection
Button Activator
Défi
JavaScriptBrowser DevToolsDOM ManipulationClient-Side Security
Header Hijacker
Défi
HTTP HeadersSecurity BypassWeb Application SecurityClient-Side Manipulation
File Include Bypass
Défi
Local File InclusionFilter BypassApache AuthenticationPassword Cracking
LDAP Injector
Défi
LDAP InjectionAuthentication BypassDirectory ServicesEnterprise SecurityWeb Security
Template Injector
Défi
Server-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb Security
WiFi Password Cracker
Défi
WiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityPacket Analysis
Redis Cache Poisoner
Défi
CRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationWeb Security
Corporate Directory Hunt
Défi
Directory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity Assessment
DNS Tunneling Detective
Défi
Network ForensicsDNS AnalysisData ExfiltrationTraffic Analysis
IP Spoofing Admin
Défi
Web SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation Gathering
Registry Hijacker
Défi
Docker Registry APIAuthentication BypassContainer SecurityAPI ManipulationRegistry Exploitation
Caesar Shift Decoder
Défi
CryptographyClassical CiphersFrequency AnalysisPattern Recognition
SUID Privilege Hunter
Défi
SUID BinariesPrivilege EscalationCommand InjectionLinux SecurityBinary Exploitation
MongoDB Injector
Défi
NoSQL InjectionMongoDBAuthentication BypassDocument DatabasesWeb Security
Infiltrator
Facile
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
RCE Playground
Moyen
Command InjectionInput Validation BypassRemote Code ExecutionFilter EvasionWeb Security
WEP Cracker
Défi
Wireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol Exploitation
Registry Hunter
Défi
Digital ForensicsWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware Analysis
Book Cipher Challenge
Défi
CryptographyClassical CiphersPattern RecognitionHistorical Cryptanalysis
Admin Portal Breach
Défi
Client-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksAuthentication Bypass
Corporate Backup Deserializer
Défi
Python PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise Security
Git Secrets Hunter
Défi
Git ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINT
ZIP Cracker
Défi
ZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive Security
KeePass Breaker
Défi
KeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool Limitations
Template Injection
Défi
Server-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPrivilege Escalation
PDF Password Cracker
Défi
PDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force Attacks
Shell Command Scanner
Défi
Command InjectionWeb SecurityShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity Assessment
LFI Log Poison
Défi
Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalWeb SecurityApache SecuritySystem AdministrationLog Analysis
Broken Chain
Difficile
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
NoSQL Injection
Défi
NoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator Exploitation
File Upload Bypass
Défi
File UploadWeb SecurityBypass TechniquesPHPWeb ShellsInput ValidationSocial EngineeringPost Exploitation
WP Ultimate
Difficile
WP
Internal
Difficile
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
CSRF Bank Transfer
Défi
CSRFCross-Site Request ForgerySession SecurityWeb SecuritySocial EngineeringForm SecurityHTTP SecurityState Management
URL Scanner
Défi
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2
Alpwned
Moyen
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
XSS Playground
Défi
XSSCross-Site ScriptingStored XSSSession HijackingJavaScriptWeb SecurityClient-Side SecurityDOM Manipulation
JWT Claims Manipulation
Défi
JWTClaims ManipulationPrivilege EscalationAuthentication BypassTime-Based AttacksSignature Cracking
SQL Injection
Défi
SQL InjectionDatabase SecurityWeb SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability Assessment
XXE Exposed
Défi
XXEXML SecurityFile DisclosureExternal EntityWeb SecurityVulnerability Assessment
JWT Algo Confusion
Défi
JWTAlgorithm ConfusionRS256HS256Token ForgeryWeb Security
JWT Bypass
Défi
JWTWeb SecurityToken AuthenticationCryptography
Auth Bypass
Défi
SQL InjectionAuthentication BypassWeb SecurityDatabase Security
Ping Pwn
Défi
Command InjectionWeb ExploitationService DiscoveryNetwork Security
Log Hunter
Défi
Log AnalysisWeb SecurityIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity Assessment
Corporate Breach
Défi
Web SecurityPHPLFIPassword CrackingAuthentication BypassDirectory Traversal
Corporate Breach 2
Défi
Web SecurityPHPLFIPath ManipulationFile Inclusion
Sonic Cipher
Défi
SteganographyAudio AnalysisLSBForensicsPython
Rail Fence
Défi
CryptographyTransposition CipherRail FencePattern RecognitionPython
Flask Error
Défi
FlaskDebug ModePythonWeb SecurityMemory Analysis
Path Traversal
Défi
Path TraversalCGIWeb SecurityFile AccessDirectory TraversalInput Validation
API Logic Flaw
Défi
API SecurityLogic FlawAuthentication BypassParameter ManipulationPHPWeb Security
Pixel Puzzler
Défi
SteganographyImage AnalysisLSBForensicsPython
PDF Trap
Défi
PDF ForensicsFile AnalysisMetadataHidden DataForensic Tools
Blockchain Secrets
Défi
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic Analysis
DNS Exfil
Défi
Network AnalysisDNSPacket AnalysisData ExfiltrationBase64 Decoding
Crypto Cipher
Défi
CryptanalysisClassical CryptoPattern RecognitionData Encoding
Session Switch
Défi
Web SecuritySession ManagementAuthenticationPrivilege EscalationPHP
Snapchat Exposed
Défi
JenkinsCI/CDDevOpsWeb SecurityPentestAutomation
Red is Dead
Défi
Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedis
Compromised 2
Difficile
Advanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassPrivilege Escalation
Memory Forensics
Défi
Memory ForensicsBinary AnalysisDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 Encoding
API Breaker
Défi
API SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization Bypass
QR Code Quest
Défi
QR Code AnalysisImage AnalysisData ExtractionSteganographyDigital Forensics
Query Quake
Moyen
MYSQLIRCE
Hex Hunt
Défi
JavaScriptWeb DevelopmentHexadecimalBrowser DevTools
Packet Pursuit
Défi
Network AnalysisPacket CaptureWiresharkProtocol Analysis
Stego Hunt
Défi
SteganographyImage AnalysisWebCTF Basics
Get the Password
Défi
JavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevTools
Binary Secrets
Défi
Binary AnalysisHex EditorsData StructuresReverse EngineeringFile Analysis
AlVault
Moyen
WEB
Base64 Detective
Défi
Base64Web InspectionBrowser DevToolsData EncodingHTML Analysis
FiPloit
Facile
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Compromised 1
Moyen
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Traversed
Moyen
GIT
Matsudo
Moyen
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Beyond Echo
Moyen
PHPRCE
Cronpocalypse
Facile
SSH
Anonymous 2
Facile
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Spoof!
Facile
IP SPOOFING
Anonymous
Facile
FTP
Include me
Facile
PHPLFI
Secrets in Source
Très Facile
HTMLLearning Path
Onboarding Lab: Access and Flags
Très Facile
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Nmap Lab 102
Très Facile
TELNETLearning Path
Hack the Cookie
Très Facile
WEBLearning Path
Hack the Login
Très Facile
WebAuthenticationClient-Side SecurityLearning Path
Progression des Cours
Vos parcours d'apprentissage et modules