saraivadigital
✦ Legend ✦
En ligne
Enjoy!
Activité
141 jours actifs sur la dernière annéeProgression de Rang
✦ Legend ✦
Rang Maximum
Accomplissements
Premier Sang
Série Débutant
Maître de la Série
Légende de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
Password CrackingCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReusePrompt InjectionLLM SecurityAI Red TeamingJailbreakOWASP LLM Top 10Guardrail BypassSystem Prompt LeakageExcessive AgencySSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationJWTAlgorithm ConfusionRS256HS256Token ForgeryWeb SecurityToken AuthenticationCryptographyClaims ManipulationAuthentication BypassTime-Based AttacksSignature CrackingServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationAPI SecurityLogic FlawParameter ManipulationPHPFile UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesGitVersion ControlSource Code AnalysisReconnaissanceLFIPath ManipulationFile InclusionSession ManagementAuthenticationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityAWS EC2Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassJenkinsCI/CDDevOpsPentestAutomationDirectory TraversalJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityLDAP InjectionDirectory ServicesNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationRace ConditionsTiming AttacksConcurrent ExploitationWeb Application SecurityGraphQLSchema IntrospectionInjectionYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsTransposition CipherRail FencePattern RecognitionPythonKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingfcrackzipDictionary AttacksBrute ForceArchive SecurityOffice SecurityHash ExtractionHashcatPDF SecurityDigital ForensicsDocument SecurityBrute Force AttacksNetwork AnalysisDNSPacket AnalysisData ExfiltrationBase64 DecodingWiFi SecurityWPA CrackingWireless Penetration TestingWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationQR Code AnalysisImage AnalysisData ExtractionSteganographyPacket CaptureWiresharkProtocol AnalysisLSBForensicsWebCTF BasicsBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisAudio AnalysisMD5 CrackingPassword AttacksClassical CiphersPolyalphabetic CiphersWeb InspectionHTML AnalysisBinary AnalysisHex EditorsData StructuresReverse EngineeringMemory ForensicsTool UsageROT13 EncodingWindows RegistryPersistence AnalysisMalware AnalysisWeb DevelopmentHexadecimalFlaskDebug ModeMemory AnalysisJinja2 ExploitationHTTP HeadersIP SpoofingInformation GatheringDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationNetwork ForensicsDNS AnalysisTraffic AnalysisDocument DatabasesDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationXSSCross-Site ScriptingStored XSSSession HijackingLocal File InclusionUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisCommand InjectionShell CommandsHTTP Parameter ManipulationSecurity BypassClient-Side ManipulationCookie ManipulationType JugglingHash AnalysisRegex BypassSQLiteUNION-Based SQLiLinuxCommand LineFile System NavigationHidden FilesgrepfindEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationHTTP ProtocolRequest SmugglingWeb EnumerationFile DiscoveryUnicodeWeb ForensicsText AnalysisFilter BypassApache AuthenticationURL ManipulationInternal Network AccessProtocol BypassIDORPath InjectionFile System SecurityFile AccessOAuth 2.0Web ReconConfiguration ExploitsCSSMedia QueriesSource AnalysisDevToolsIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationSUID BinariesLinux SecurityBinary ExploitationHistorical CryptanalysisCryptanalysisClassical CryptoRainbow TablesPassword AnalysisSecurity ToolsXORKnown-Plaintext AttackAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationFrequency AnalysisLinux CapabilitiesReverse ShellSystem EnumerationWindows SecurityNTLMhashcatWPFilter EvasionSSHSudoFile Upload BypassPHP SecurityWeb Shell ExploitationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationJWT ManipulationSSH ExploitationLog InjectionFile EnumerationCron JobsConfiguration AnalysisWeb ExploitationHeadless CMSInformation DisclosureRevision HistoryToken AbuseMYSQLIRCEDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBMass AssignmentLinux Privilege EscalationHost Header InjectionPassword Reset PoisoningWEBGITApache TomcatWAR DeploymentDefault CredentialsPickle DeserializationCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraSSTISSH Brute ForceCommand Line ToolsAttack DetectionPath TraversalCGIDeobfuscationCode AnalysisFile PermissionsIP SPOOFINGAccess ControlCookie PoisoningSession TamperingSecurity Through ObscurityView SourceBroken Access ControlHTMLFTPNmapNmap CommandsTelnetPort ScanningView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
JWT Algo Confusion
Défi
JWT Bypass
Défi
Template Injection
Défi
Git Secrets Hunter
Défi
Redis Cache Poisoner
Défi
API Logic Flaw
Défi
File Upload Bypass
Défi
Git Exposed
Défi
Corporate Breach 2
Défi
Session Switch
Défi
URL Scanner
Défi
Red is Dead
Défi
API Breaker
Défi
Snapchat Exposed
Défi
Corporate Breach
Défi
Button Activator
Défi
LDAP Injector
Défi
NoSQL Injection
Défi
GraphQL Gateway
Défi
YAML Bomb
Défi
CSRF Bank Transfer
Défi
WebDAV Explorer
Défi
XXE Exposed
Défi
PDF Trap
Défi
Rail Fence
Défi
KeePass Breaker
Défi
ZIP Cracker
Défi
PDF Password Cracker
Défi
DNS Exfil
Défi
WEP Cracker
Défi
QR Code Quest
Défi
Packet Pursuit
Facile
Pixel Puzzler
Défi
Stego Hunt
Défi
Blockchain Secrets
Défi
Sonic Cipher
Défi
Admin Portal Breach
Défi
Vigenère Stego Hunt
Défi
Base64 Detective
Défi
Binary Secrets
Défi
Memory Forensics
Défi
Registry Hunter
Défi
Hex Hunt
Défi
Flask Error
Défi
Template Injector
Défi
IP Spoofing Admin
Défi
Registry Hijacker
Défi
MongoDB Injector
Défi
SQL Injection
Défi
XSS Playground
Défi
LFI Log Poison
Défi
Header Hijacker
Défi
Cookie Forge
Défi
Type Juggling Bypass
Défi
Regex Bypass to SQLi
Défi
HTTP Smuggling
Défi
Backup Hunter
Défi
Phantom Text
Défi
File Include Bypass
Défi
SSRF Validator
Défi
IDOR Explorer
Défi
Token Trust
Défi
Fine Print
Défi
Broken Chain
Difficile
Crypto Cipher
Défi
Get the Password
Défi
Crack SHA1 Hash
Défi
XOR Reuse
Défi
Compromised 2
Difficile
Caesar Shift Decoder
Défi
Internal
Difficile
Shadow Cracker
Défi
WP Ultimate
Difficile
RCE Playground
Moyen
Matsudo
Moyen
FiPloit
Facile
Anonymous 2
Facile
Infiltrator
Facile
Scheduled Sabotage
Facile
Query Quake
Moyen
Hack the Box
Difficile
Host Hijack
Moyen
AlVault
Moyen
TechNova Infiltration
Moyen
Traversed
Moyen
Beyond Echo
Moyen
Compromised 1
Moyen
Pickle Jar
Moyen
FortiPy
Difficile
Log Hunter
Défi
Path Traversal
Défi
Ping Pwn
Défi
Auth Bypass
Défi
Hack This Site
Défi
Alpwned
Moyen
Hidden CMS Breach
Moyen
Cronpocalypse
Facile
Spoof!
Facile
ClearDesk
Moyen
Include me
Facile
Test d'injection SQL
Défi
Anonymous
Facile
Hack the Login
Très Facile
Kerberoasting
Fondamentaux AD
Relais NTLM
DCSync
Persistance AD
Mouvement latéral
Attaques de délégation
Password spraying
Énumération AD
AS-REP Roasting
Carrières en test d'intrusion
L'industrie de la cybersécurité
Reconnaissance active
Post-exploitation
Pivotement
Exploitation de services
Rapports de pentest
Attaques de mots de passe
Attaques MITM
Scan de vulnérabilités
Fondamentaux réseau
Énumération de services
Red Teaming
10
Infrastructure d'attaque
Techniques de persistance
Accès initial
Bases du red teaming
Purple teaming
Évasion des défenses
Rapports d'engagement
Frameworks C2
Objectifs de mission
Mouvement latéral
Aide-Mémoire Hydra
Aide-Mémoire Nikto
Aide-Mémoire John the Ripper
Aide-Mémoire SQLMap
Aide-Mémoire Wireshark
Aide-Mémoire Burp Suite
Aide-Mémoire Gobuster
Aide-Mémoire Nmap
Aide-Mémoire Hashcat
Aide-Mémoire Metasploit
Attaques Web
12
Attaques CSRF
Injection XXE
SSRF
Inclusion de Fichiers
Intro Sécurité Web
SSTI
Désérialisation
Attaques File Upload
Attaques XSS
Bypass Auth
Injection SQL
Injection de Commandes
Bug Bounty
10
Gains rapides
Configuration de chasse
Automatisation
Bases du bug bounty
Méthodologie de chasse
Éviter les doublons
Carrière bug bounty
Fondamentaux de recon
Rédaction de rapports
Sélection de programmes
Mécanismes d'authentification
Cookies et sessions
En-têtes de sécurité HTTP
Requêtes et réponses HTTP
DevTools du navigateur pour la reconnaissance
HTTPS et TLS
Vulnérabilités web courantes
URLs, domaines et DNS
HTML et le navigateur
Politique de même origine et CORS
Bases du JWT
Falsification JWT
Craquage JWT
Confusion d'Algorithme
Fondamentaux de la chasse
Chasse avec MITRE ATT&CK
Chasse endpoint et réseau
La boucle de chasse
Le réseau en dessous
Vulnérabilités et exploits
Comment les mots de passe cèdent
L'encodage n'est pas du chiffrement
L'état d'esprit du hacker
Votre feuille de route
Pirater l'humain
Caché en pleine vue
Renseignement de sources ouvertes
La boîte à outils du hacker
Profile Updated
+3 XP
22 hours ago
Daily Hack Solved
- The ad that was one letter off
+10 XP
22 hours ago
Daily Hack Solved
- The file that kept its name
+10 XP
1 day ago
Daily Hack Solved
- The meeting code that was a login
+10 XP
2 days ago
Daily Hack Solved
- The build that packed its own key
+10 XP
3 days ago
Daily Hack Solved
- The policy nobody wrote
+10 XP
4 days ago
Daily Hack Solved
- Two names, one signature
+10 XP
6 days ago
Daily Hack Solved
- The address the signers never saw
+10 XP
6 days ago
Daily Hack Solved
- The run that gave the hotel away
+10 XP
1 week ago
Daily Hack Solved
- The model that phoned home
+10 XP
1 week ago
Daily Hack Solved
- The captcha that filled your clipboard
+10 XP
1 week ago
Daily Hack Solved
- The key the heap kept
+10 XP
1 week ago
Daily Hack Solved
- A minute of weak tickets
+10 XP
1 week ago
Daily Hack Solved
- The field the error named
+10 XP
1 week ago
Daily Hack Solved
- The analytics script nobody added
+10 XP
1 week ago
Daily Hack Solved
- The name that ran
+10 XP
2 weeks ago
Daily Hack Solved
- Deleted in the last layer
+10 XP
2 weeks ago
Daily Hack Solved
- Two logins too far apart
+10 XP
2 weeks ago
Daily Hack Solved
- The key that poisoned the base
+10 XP
2 weeks ago
Daily Hack Solved
- The origin it trusted
+10 XP
2 weeks ago
Daily Hack Solved
- The current that spelled it out
+10 XP
2 weeks ago
Daily Hack Solved
- Who really called
+10 XP
2 weeks ago
Daily Hack Solved
- The name that points nowhere
+10 XP
3 weeks ago
Daily Hack Solved
- The folder that shipped itself
+10 XP
3 weeks ago
Daily Hack Solved
- One password, many doors
+10 XP
3 weeks ago
Daily Hack Solved
- The redaction that was a layer
+10 XP
3 weeks ago
Daily Hack Solved
- The role any repo can wear
+10 XP
3 weeks ago
Daily Hack Solved
- The note inside the tool
+10 XP
3 weeks ago
Daily Hack Solved
- The cookie that was an object
+10 XP
4 weeks ago
Daily Hack Solved
- The redirect it only half checked
+10 XP
4 weeks ago
Daily Hack Solved
- The filename that runs
+10 XP
4 weeks ago
Daily Hack Solved
- The header that skips the check
+10 XP
4 weeks ago
Daily Hack Solved
- The codes the page had to know
+10 XP
1 month ago
Daily Hack Solved
- The word you already know
+10 XP
1 month ago
Daily Hack Solved
- The claim inside the claim
+10 XP
1 month ago
Daily Hack Solved
- The link you can write yourself
+10 XP
1 month ago
Daily Hack Solved
- The clock behind the commits
+10 XP
1 month ago
Daily Hack Solved
- The second factor in the backup
+10 XP
1 month ago
Daily Hack Solved
- The header that says where you are
+10 XP
1 month ago
Daily Hack Solved
- After the last byte
+10 XP
1 month ago
Daily Hack Solved
- Every road leads there
+10 XP
1 month ago
Actif pendant 1 jours
1 month ago
Daily Hack Solved
- The field that wins
+10 XP
1 month ago
Actif pendant 1 jours
1 month ago
Daily Hack Solved
- Approved by somebody else
+10 XP
1 month ago
Daily Hack Solved
- The trigger that changed everything
+10 XP
1 month ago
Daily Hack Solved
- Two victims, one supplier
+10 XP
1 month ago
Daily Hack Solved
- The light that talks
+10 XP
1 month ago
Daily Hack Solved
- One page of six
+10 XP
1 month ago
Daily Hack Solved
- Bigger than it says
+10 XP
1 month ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat