saraivadigital
✦ Legend ✦
En ligne
Enjoy!
Activité
100 jours actifs sur la dernière année
Moins
Plus
Progression de Rang
✦ Legend ✦
Rang Maximum
Accomplissements
Premier Sang
Série Débutant
Maître de la Série
Légende de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
Password CrackingCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReusePrompt InjectionLLM SecurityAI Red TeamingJailbreakOWASP LLM Top 10Guardrail BypassSystem Prompt LeakageExcessive AgencySSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationJWTAlgorithm ConfusionRS256HS256Token ForgeryWeb SecurityToken AuthenticationCryptographyClaims ManipulationAuthentication BypassTime-Based AttacksSignature CrackingServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationAPI SecurityLogic FlawParameter ManipulationPHPFile UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesGitVersion ControlSource Code AnalysisReconnaissanceLFIPath ManipulationFile InclusionSession ManagementAuthenticationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityAWS EC2Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassJenkinsCI/CDDevOpsPentestAutomationDirectory TraversalJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityLDAP InjectionDirectory ServicesNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationRace ConditionsTiming AttacksConcurrent ExploitationWeb Application SecurityGraphQLSchema IntrospectionInjectionYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsTransposition CipherRail FencePattern RecognitionPythonKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingfcrackzipDictionary AttacksBrute ForceArchive SecurityOffice SecurityHash ExtractionHashcatPDF SecurityDigital ForensicsDocument SecurityBrute Force AttacksNetwork AnalysisDNSPacket AnalysisData ExfiltrationBase64 DecodingWiFi SecurityWPA CrackingWireless Penetration TestingWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationQR Code AnalysisImage AnalysisData ExtractionSteganographyPacket CaptureWiresharkProtocol AnalysisLSBForensicsWebCTF BasicsBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisAudio AnalysisMD5 CrackingPassword AttacksClassical CiphersPolyalphabetic CiphersWeb InspectionHTML AnalysisBinary AnalysisHex EditorsData StructuresReverse EngineeringMemory ForensicsTool UsageROT13 EncodingWindows RegistryPersistence AnalysisMalware AnalysisWeb DevelopmentHexadecimalFlaskDebug ModeMemory AnalysisJinja2 ExploitationHTTP HeadersIP SpoofingInformation GatheringDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationNetwork ForensicsDNS AnalysisTraffic AnalysisDocument DatabasesDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationXSSCross-Site ScriptingStored XSSSession HijackingLocal File InclusionUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisCommand InjectionShell CommandsHTTP Parameter ManipulationSecurity BypassClient-Side ManipulationCookie ManipulationType JugglingHash AnalysisRegex BypassSQLiteUNION-Based SQLiLinuxCommand LineFile System NavigationHidden FilesgrepfindEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationHTTP ProtocolRequest SmugglingWeb EnumerationFile DiscoveryUnicodeWeb ForensicsText AnalysisFilter BypassApache AuthenticationURL ManipulationInternal Network AccessProtocol BypassIDORPath InjectionFile System SecurityFile AccessOAuth 2.0Web ReconConfiguration ExploitsCSSMedia QueriesSource AnalysisDevToolsIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationSUID BinariesLinux SecurityBinary ExploitationHistorical CryptanalysisCryptanalysisClassical CryptoRainbow TablesPassword AnalysisSecurity ToolsXORKnown-Plaintext AttackAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationFrequency AnalysisLinux CapabilitiesReverse ShellSystem EnumerationWindows SecurityNTLMhashcatWPFilter EvasionSSHSudoFile Upload BypassPHP SecurityWeb Shell ExploitationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationJWT ManipulationSSH ExploitationLog InjectionFile EnumerationCron JobsConfiguration AnalysisWeb ExploitationHeadless CMSInformation DisclosureRevision HistoryToken AbuseMYSQLIRCEDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBMass AssignmentLinux Privilege EscalationHost Header InjectionPassword Reset PoisoningWEBGITApache TomcatWAR DeploymentDefault CredentialsPickle DeserializationCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraSSTISSH Brute ForceCommand Line ToolsAttack DetectionPath TraversalCGIDeobfuscationCode AnalysisFile PermissionsIP SPOOFINGAccess ControlCookie PoisoningSession TamperingSecurity Through ObscurityView SourceBroken Access ControlHTMLFTPNmapNmap CommandsTelnetPort ScanningView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
JWT Algo Confusion
Défi
JWT Bypass
Défi
Template Injection
Défi
Git Secrets Hunter
Défi
Redis Cache Poisoner
Défi
API Logic Flaw
Défi
File Upload Bypass
Défi
Git Exposed
Défi
Corporate Breach 2
Défi
Session Switch
Défi
URL Scanner
Défi
Red is Dead
Défi
API Breaker
Défi
Snapchat Exposed
Défi
Corporate Breach
Défi
Button Activator
Défi
LDAP Injector
Défi
NoSQL Injection
Défi
GraphQL Gateway
Défi
YAML Bomb
Défi
CSRF Bank Transfer
Défi
WebDAV Explorer
Défi
XXE Exposed
Défi
PDF Trap
Défi
Rail Fence
Défi
KeePass Breaker
Défi
ZIP Cracker
Défi
PDF Password Cracker
Défi
DNS Exfil
Défi
WEP Cracker
Défi
QR Code Quest
Défi
Packet Pursuit
Facile
Pixel Puzzler
Défi
Stego Hunt
Défi
Blockchain Secrets
Défi
Sonic Cipher
Défi
Admin Portal Breach
Défi
Vigenère Stego Hunt
Défi
Base64 Detective
Défi
Binary Secrets
Défi
Memory Forensics
Défi
Registry Hunter
Défi
Hex Hunt
Défi
Flask Error
Défi
Template Injector
Défi
IP Spoofing Admin
Défi
Registry Hijacker
Défi
MongoDB Injector
Défi
SQL Injection
Défi
XSS Playground
Défi
LFI Log Poison
Défi
Header Hijacker
Défi
Cookie Forge
Défi
Type Juggling Bypass
Défi
Regex Bypass to SQLi
Défi
HTTP Smuggling
Défi
Backup Hunter
Défi
Phantom Text
Défi
File Include Bypass
Défi
SSRF Validator
Défi
IDOR Explorer
Défi
Token Trust
Défi
Fine Print
Défi
Broken Chain
Difficile
Crypto Cipher
Défi
Get the Password
Défi
Crack SHA1 Hash
Défi
XOR Reuse
Défi
Compromised 2
Difficile
Caesar Shift Decoder
Défi
Internal
Difficile
Shadow Cracker
Défi
WP Ultimate
Difficile
RCE Playground
Moyen
Matsudo
Moyen
FiPloit
Facile
Anonymous 2
Facile
Infiltrator
Facile
Scheduled Sabotage
Facile
Query Quake
Moyen
Hack the Box
Difficile
Host Hijack
Moyen
AlVault
Moyen
TechNova Infiltration
Moyen
Traversed
Moyen
Beyond Echo
Moyen
Compromised 1
Moyen
Pickle Jar
Moyen
FortiPy
Difficile
Log Hunter
Défi
Path Traversal
Défi
Ping Pwn
Défi
Auth Bypass
Défi
Hack This Site
Défi
Alpwned
Moyen
Hidden CMS Breach
Moyen
Cronpocalypse
Facile
Spoof!
Facile
ClearDesk
Moyen
Include me
Facile
Test d'injection SQL
Défi
Anonymous
Facile
Hack the Login
Très Facile
Kerberoasting
Fondamentaux AD
Relais NTLM
DCSync
Persistance AD
Mouvement latéral
Attaques de délégation
Password spraying
Énumération AD
AS-REP Roasting
Carrières en test d'intrusion
L'industrie de la cybersécurité
Reconnaissance active
Post-exploitation
Pivotement
Exploitation de services
Rapports de pentest
Attaques de mots de passe
Attaques MITM
Scan de vulnérabilités
Fondamentaux réseau
Énumération de services
Red Teaming
10
Infrastructure d'attaque
Techniques de persistance
Accès initial
Bases du red teaming
Purple teaming
Évasion des défenses
Rapports d'engagement
Frameworks C2
Objectifs de mission
Mouvement latéral
Aide-Mémoire Hydra
Aide-Mémoire Nikto
Aide-Mémoire John the Ripper
Aide-Mémoire SQLMap
Aide-Mémoire Wireshark
Aide-Mémoire Burp Suite
Aide-Mémoire Gobuster
Aide-Mémoire Nmap
Aide-Mémoire Hashcat
Aide-Mémoire Metasploit
Attaques Web
12
Attaques CSRF
Injection XXE
SSRF
Inclusion de Fichiers
Intro Sécurité Web
SSTI
Désérialisation
Attaques File Upload
Attaques XSS
Bypass Auth
Injection SQL
Injection de Commandes
Bug Bounty
10
Gains rapides
Configuration de chasse
Automatisation
Bases du bug bounty
Méthodologie de chasse
Éviter les doublons
Carrière bug bounty
Fondamentaux de recon
Rédaction de rapports
Sélection de programmes
Mécanismes d'authentification
Cookies et sessions
En-têtes de sécurité HTTP
Requêtes et réponses HTTP
DevTools du navigateur pour la reconnaissance
HTTPS et TLS
Vulnérabilités web courantes
URLs, domaines et DNS
HTML et le navigateur
Politique de même origine et CORS
Bases du JWT
Falsification JWT
Craquage JWT
Confusion d'Algorithme
Fondamentaux de la chasse
Chasse avec MITRE ATT&CK
Chasse endpoint et réseau
La boucle de chasse
Le réseau en dessous
Vulnérabilités et exploits
Comment les mots de passe cèdent
L'encodage n'est pas du chiffrement
L'état d'esprit du hacker
Votre feuille de route
Pirater l'humain
Caché en pleine vue
Renseignement de sources ouvertes
La boîte à outils du hacker
Daily Hack Solved
- The field that wins
+10 XP
1 day ago
Actif pendant 1 jours
2 days ago
Daily Hack Solved
- Approved by somebody else
+10 XP
3 days ago
Daily Hack Solved
- The trigger that changed everything
+10 XP
4 days ago
Daily Hack Solved
- Two victims, one supplier
+10 XP
5 days ago
Daily Hack Solved
- The light that talks
+10 XP
6 days ago
Daily Hack Solved
- One page of six
+10 XP
1 week ago
Daily Hack Solved
- Bigger than it says
+10 XP
1 week ago
Daily Hack Solved
- The fill that was arranged
+10 XP
1 week ago
Daily Hack Solved
- The sender nobody owns
+10 XP
1 week ago
Daily Hack Solved
- The invite that made an owner
+10 XP
1 week ago
Daily Hack Solved
- Who signs your token
+10 XP
1 week ago
Streak Frozen
1 week ago
Actif pendant 1 jours
2 weeks ago
Daily Hack Solved
- The allowlist that isn't
+10 XP
2 weeks ago
Daily Hack Solved
- Three keys, one account
+10 XP
2 weeks ago
Daily Hack Solved
- The canary build
+10 XP
2 weeks ago
Chapter Completed
- Persistance AD
+1 XP
2 weeks ago
Chapter Completed
- DCSync
+1 XP
2 weeks ago
Chapter Completed
- Attaques de délégation
+1 XP
2 weeks ago
Chapter Completed
- Mouvement latéral
+1 XP
2 weeks ago
Chapter Completed
- Relais NTLM
+1 XP
2 weeks ago
Chapter Completed
- Password spraying
+1 XP
2 weeks ago
Chapter Completed
- AS-REP Roasting
+1 XP
2 weeks ago
Chapter Completed
- Kerberoasting
+1 XP
2 weeks ago
Chapter Completed
- Énumération AD
+1 XP
2 weeks ago
Chapter Completed
- Fondamentaux AD
+1 XP
2 weeks ago
Daily Hack Solved
- The gateway that appeared
+10 XP
2 weeks ago
Flag Found
- Cassage de mots de passe - attaque par dictionnaire personnalisé
+100 XP
2 weeks ago
Flag Found
- Cassage de mots de passe - attaque par dictionnaire personnalisé
+100 XP
2 weeks ago
Daily Hack Solved
- The click you never made
+10 XP
2 weeks ago
Chapter Completed
- Falsification JWT
+1 XP
2 weeks ago
Chapter Completed
- Confusion d'Algorithme
+1 XP
2 weeks ago
Chapter Completed
- Craquage JWT
+1 XP
2 weeks ago
Chapter Completed
- Bases du JWT
+1 XP
2 weeks ago
Actif pendant 1 jours
3 weeks ago
Daily Hack Solved
- Count the layers
+10 XP
3 weeks ago
Daily Hack Solved
- The total you do not see
+10 XP
3 weeks ago
Daily Hack Solved
- How long does it live
+10 XP
3 weeks ago
Chapter Completed
- Chasse endpoint et réseau
+1 XP
3 weeks ago
Chapter Completed
- Chasse avec MITRE ATT&CK
+1 XP
3 weeks ago
Chapter Completed
- La boucle de chasse
+1 XP
3 weeks ago
Chapter Completed
- Fondamentaux de la chasse
+1 XP
3 weeks ago
Daily Hack Solved
- The alibi that breaks
+10 XP
3 weeks ago
Daily Hack Solved
- Recover the XOR key
+10 XP
3 weeks ago
Daily Hack Solved
- Find the safe one
+10 XP
3 weeks ago
Daily Hack Solved
- Repair the magic bytes
+10 XP
4 weeks ago
Daily Hack Solved
- Count the compromised
+10 XP
4 weeks ago
Daily Hack Solved
- The version that leaks
+10 XP
1 month ago
Daily Hack Solved
- When did the backups die
+10 XP
1 month ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat