skalvin
Grandmaster
En ligne
¯\_(ツ)_/¯ Mess with the best, die like the rest
Activité
197 jours actifs sur la dernière année
Moins
Plus
Progression de Rang
Grandmaster
✦ Legend ✦
17056 / 17284 XP
Accomplissements
Premier Sang
Série Débutant
Maître de la Série
Rat de Lab
Expert de Lab
Maître de Lab
Érudit
Top 10
Reverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraWeb Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingHost Header InjectionPassword Reset PoisoningPrivilege EscalationHTTP HeadersWeb ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePythonPickle DeserializationRCELinuxIDORAPI SecurityPath TraversalAccess ControlOAuth 2.0JWTWeb ReconConfiguration ExploitsUnicodeSteganographyWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsCommand LineFile System NavigationHidden FilesgrepfindAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisHex EditorsData StructuresFile AnalysisWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassMemory ForensicsDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 EncodingWeb SecuritySession ManagementAuthenticationPHPFile UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationAudio AnalysisLSBForensicsKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsAlgorithm ConfusionRS256HS256Token ForgeryLogic FlawParameter ManipulationMD5Rainbow TablesDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperWeb EnumerationWPClient-Side SecuritySecurity Through ObscurityView SourceBroken Access ControlHTMLIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationPassword CrackingLinux SecurityJohn the RipperhashcatCryptographySSHWindows SecurityNTLMHashcatHash AnalysisOffice SecurityHash ExtractionSQL InjectionRegex BypassSQLiteUNION-Based SQLiGitVersion ControlSource Code AnalysisReconnaissanceFile DiscoveryInformation GatheringType JugglingPassword AnalysisSecurity ToolsDatabase SecurityDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSSTIFlask SecuritySSH Brute ForceDatabase EnumerationClassical CiphersPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRace ConditionsTiming AttacksConcurrent ExploitationSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationCookie ManipulationDOM ManipulationFilter EvasionGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationFrequency AnalysisDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationSUID BinariesNoSQL InjectionMongoDBDocument DatabasesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationLDAP InjectionDirectory ServicesEnterprise SecurityJWT ManipulationSSH ExploitationLog InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksIP SpoofingAccess Control BypassJinja2 ExploitationWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationWindows RegistryPersistence AnalysisMalware AnalysisHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisVisibility ControlsSecurity TestingOperator ExploitationReverse ShellSystem EnumerationNetwork ReconnaissanceServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File PermissionsCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementXSSCross-Site ScriptingStored XSSSession HijackingCGIClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityToken AuthenticationService DiscoveryCommand Line ToolsAttack DetectionFlaskDebug ModeMemory AnalysisTransposition CipherRail FencePDF ForensicsMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionDNSCryptanalysisClassical CryptoData EncodingJenkinsCI/CDDevOpsPentestAutomationDatabase ForensicsCLI UsageBase64Hex EncodingRedisQR Code AnalysisMYSQLIWeb InspectionHTML AnalysisWEBFile Upload BypassPHP SecurityWeb Shell ExploitationApache TomcatWAR DeploymentDefault CredentialsSudoGITView Source CodeNmapNmap CommandsTelnetPort ScanningFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsIP SPOOFINGCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning Path
Host Hijack
Moyen
Pickle Jar
Moyen
ClearDesk
Moyen
Token Trust
Défi
Phantom Text
Défi
Fine Print
Défi
Compromised 2
Difficile
Hex Hunt
Défi
Stego Hunt
Défi
Packet Pursuit
Défi
Binary Secrets
Défi
API Breaker
Défi
Memory Forensics
Défi
Session Switch
Défi
File Upload Bypass
Défi
Sonic Cipher
Défi
KeePass Breaker
Défi
JWT Algo Confusion
Défi
API Logic Flaw
Défi
Get the Password
Défi
Hack the Box
Difficile
Hidden CMS Breach
Moyen
WP Ultimate
Difficile
Broken Chain
Difficile
Shadow Cracker
Défi
TechNova Infiltration
Moyen
Regex Bypass to SQLi
Défi
Git Exposed
Défi
Backup Hunter
Défi
Type Juggling Bypass
Défi
Crack SHA1 Hash
Défi
Test d'injection SQL
Défi
Hack This Site
Défi
HTTP Smuggling
Défi
SSRF Validator
Défi
FortiPy
Difficile
Vigenère Stego Hunt
Défi
YAML Bomb
Défi
WebDAV Explorer
Défi
IDOR Explorer
Défi
Header Hijacker
Défi
File Include Bypass
Défi
Cookie Forge
Défi
Button Activator
Défi
RCE Playground
Moyen
GraphQL Gateway
Défi
Caesar Shift Decoder
Défi
Registry Hijacker
Défi
MongoDB Injector
Défi
Redis Cache Poisoner
Défi
LDAP Injector
Défi
Infiltrator
Facile
IP Spoofing Admin
Défi
Template Injector
Défi
WEP Cracker
Défi
Registry Hunter
Défi
Admin Portal Breach
Défi
Git Secrets Hunter
Défi
ZIP Cracker
Défi
Template Injection
Défi
PDF Password Cracker
Défi
LFI Log Poison
Défi
NoSQL Injection
Défi
Internal
Difficile
URL Scanner
Défi
Alpwned
Moyen
CSRF Bank Transfer
Défi
XSS Playground
Défi
Path Traversal
Défi
SQL Injection
Défi
XXE Exposed
Défi
JWT Bypass
Défi
Auth Bypass
Défi
Ping Pwn
Défi
Log Hunter
Défi
Flask Error
Défi
Rail Fence
Défi
Pixel Puzzler
Défi
PDF Trap
Défi
Blockchain Secrets
Défi
Corporate Breach 2
Défi
Corporate Breach
Défi
DNS Exfil
Défi
Crypto Cipher
Défi
Snapchat Exposed
Défi
Red is Dead
Défi
QR Code Quest
Défi
Query Quake
Moyen
Base64 Detective
Défi
AlVault
Moyen
FiPloit
Facile
Compromised 1
Moyen
Traversed
Moyen
Matsudo
Moyen
Beyond Echo
Moyen
Cronpocalypse
Facile
Include me
Facile
Anonymous 2
Facile
Anonymous
Facile
Spoof!
Facile
Hack the Login
Très Facile
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Reconnaissance active
Post-exploitation
Pivotement
Exploitation de services
Rapports de pentest
Attaques de mots de passe
Attaques MITM
Scan de vulnérabilités
Fondamentaux réseau
Énumération de services
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Comment les mots de passe cèdent
L'encodage n'est pas du chiffrement
L'état d'esprit du hacker
Rainbow tables
Cassage sans fil
Cassage de PDF
Cassage de hashes Linux
Cassage de Documents Office
Cassage de ZIP
Attaques par force brute
Fondamentaux des mots de passe
Attaques par dictionnaire
Cassage de hashes Windows
Aide-Mémoire Hydra
Aide-Mémoire Nikto
Aide-Mémoire John the Ripper
Aide-Mémoire SQLMap
Aide-Mémoire Wireshark
Aide-Mémoire Burp Suite
Aide-Mémoire Gobuster
Aide-Mémoire Nmap
Aide-Mémoire Hashcat
Aide-Mémoire Metasploit
Attaques Web
12
Attaques CSRF
Injection XXE
SSRF
Inclusion de Fichiers
Intro Sécurité Web
SSTI
Désérialisation
Attaques File Upload
Attaques XSS
Bypass Auth
Injection SQL
Injection de Commandes
Bug Bounty
10
Gains rapides
Configuration de chasse
Automatisation
Bases du bug bounty
Méthodologie de chasse
Éviter les doublons
Carrière bug bounty
Fondamentaux de recon
Rédaction de rapports
Sélection de programmes
Bases du JWT
Falsification JWT
Craquage JWT
Confusion d'Algorithme
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Usurpation de tokens
Bases du privesc Windows
WinPEAS et PowerUp
Exploitation de services
Énumération Windows
Attaques du registre
CVE
1
CVE-2024-34899
Daily Hack Solved
- Recover the XOR key
+10 XP
7 hours ago
Daily Hack Solved
- Find the safe one
+10 XP
1 day ago
Streak Frozen
2 days ago
Daily Hack Solved
- Count the compromised
+10 XP
3 days ago
Streak Frozen
4 days ago
Daily Hack Solved
- When did the backups die
+10 XP
5 days ago
Daily Hack Solved
- Follow the ransom BTC
+10 XP
6 days ago
Daily Hack Solved
- Single-byte XOR
+10 XP
1 week ago
Daily Hack Solved
- Who pulled the keys
+10 XP
1 week ago
Daily Hack Solved
- PEM, not JPG
+10 XP
1 week ago
Daily Hack Solved
- A token you can read
+10 XP
1 week ago
Daily Hack Solved
- Decode the stored credential
+10 XP
1 week ago
Daily Hack Solved
- Find the leaked AWS key
+10 XP
2 weeks ago
Daily Hack Solved
- Who got root
+10 XP
2 weeks ago
Daily Hack Solved
- Read the system prompt
+10 XP
2 weeks ago
Daily Hack Solved
- Forge the group claim
+10 XP
2 weeks ago
Daily Hack Solved
- The webview endpoint
+10 XP
3 weeks ago
Daily Hack Solved
- Find the reentrancy bug
+10 XP
3 weeks ago
Daily Hack Solved
- SSRF to the internal KV store
+10 XP
3 weeks ago
Daily Hack Solved
- Open the app sandbox
+10 XP
3 weeks ago
Daily Hack Solved
- Find the SQLi probe
+10 XP
3 weeks ago
Daily Hack Solved
- Find the employer
+10 XP
3 weeks ago
Daily Hack Solved
- Decrypt the ransom note
+10 XP
4 weeks ago
Daily Hack Solved
- The token names the host
+10 XP
4 weeks ago
Daily Hack Solved
- Find the tool-exec RCE sink
+10 XP
4 weeks ago
Daily Hack Solved
- PNG, not TXT
+10 XP
1 month ago
Daily Hack Solved
- Find the hidden email
+10 XP
1 month ago
Daily Hack Solved
- Loot the instance role
+10 XP
1 month ago
Actif pendant 1 jours
1 month ago
Daily Hack Solved
- Vigenere then base64
+10 XP
1 month ago
Daily Hack Solved
- Read the JWT claim
+10 XP
1 month ago
Actif pendant 1 jours
1 month ago
Daily Hack Solved
- Flip the debug flag
+10 XP
1 month ago
Daily Hack Solved
- Read the shell history
+10 XP
1 month ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 month ago
Daily Hack Solved
- Unwrap the C2 beacon
+10 XP
1 month ago
Daily Hack Solved
- Forge the tier
+10 XP
1 month ago
Daily Hack Solved
- Extract the XOR key
+10 XP
1 month ago
Daily Hack Solved
- The DEX header
+10 XP
1 month ago
Daily Hack Solved
- The hidden system prompt
+10 XP
1 month ago
Daily Hack Solved
- Unshift the letters
+10 XP
1 month ago
Daily Hack Solved
- Mass assign yourself admin
+10 XP
1 month ago
Daily Hack Solved
- Pivot three hops to the vault
+10 XP
1 month ago
Daily Hack Solved
- Dox the domain owner
+10 XP
1 month ago
Daily Hack Solved
- Spot the exfil
+10 XP
1 month ago
Actif pendant 1 jours
1 month ago
Lesson Completed
+10 XP
1 month ago
Chapter Completed
- Comment les mots de passe cèdent
+1 XP
1 month ago
Daily Hack Solved
- The none algorithm
+10 XP
1 month ago
Daily Hack Solved
- Find the SQL injection sink
+10 XP
1 month ago
Votre Certificat est Prêt!
Consultez et partagez votre Certificat d'Accomplissement
Voir le Certificat