# HackerDNA

> HackerDNA is a hands-on ethical hacking and cybersecurity training platform: vulnerable lab machines, guided courses, CTF-style challenges, a daily challenge, and live leaderboards, with an AI coaching companion. Content is educational and for authorized security testing only.

## Train
- [Hacking labs](https://hackerdna.com/labs): hands-on vulnerable machines to practice penetration testing.
- [Challenges](https://hackerdna.com/labs/challenges): CTF-style challenges across web, crypto, forensics, reversing, and more.
- [Courses](https://hackerdna.com/courses): structured lessons from fundamentals to advanced exploitation.
- [Daily Hack](https://hackerdna.com/daily-hack): a new guided one-per-day challenge.
- [Daily Hack archive](https://hackerdna.com/daily-hack/archive): past daily challenges.
- [How it works](https://hackerdna.com/how-it-works): what the platform is, how training and the points system work.

## Free tools
- [Free security tools](https://hackerdna.com/tools): free, browser-based tools for hackers and CTF players (nothing is uploaded).
- [Base64 decode & encode](https://hackerdna.com/tools/base64-decode): decode and encode Base64 in the browser.
- [URL decode & encode](https://hackerdna.com/tools/url-decode): decode and encode URL percent-encoding.
- [Hex to ASCII](https://hackerdna.com/tools/hex-to-ascii): convert hex bytes to text and back.
- [ROT13 decoder](https://hackerdna.com/tools/rot13): apply ROT13 and other Caesar shifts.
- [JWT decoder](https://hackerdna.com/tools/jwt-decoder): decode a JSON Web Token's header and claims.
- [Reverse shell generator](https://hackerdna.com/tools/reverse-shell-generator): build reverse shell one-liners for authorized testing.
- [Hash identifier](https://hackerdna.com/tools/hash-identifier): identify a hash type by its length and format.
- [MD5 generator & cracker](https://hackerdna.com/tools/md5): hash text with MD5 and crack common hashes in the browser.
- [Crontab editor](https://hackerdna.com/tools/crontab-guru): read cron expressions in plain English and preview next runs.
- [Nmap cheat sheet](https://hackerdna.com/tools/nmap-cheat-sheet): build Nmap commands and browse a flag reference.

## Content
- [Blog](https://hackerdna.com/blog): guides and tutorials on cybersecurity, CTFs, and certifications.
- [Next releases](https://hackerdna.com/next-releases): upcoming labs and content.

## Rankings and community
- [Top hackers](https://hackerdna.com/rankings/users): global user leaderboard.
- [Country rankings](https://hackerdna.com/rankings/countries): leaderboards by country.
- [University rankings](https://hackerdna.com/rankings/universities): leaderboards by university.
- [Contributors](https://hackerdna.com/rankings/contributors): top community contributors.
- [Streaks](https://hackerdna.com/rankings/streak/current): longest current daily-activity streaks.
- [Daily Hack streaks](https://hackerdna.com/rankings/daily-hack-streak/current): longest current Daily Hack streaks.

## About and getting started
- [Team](https://hackerdna.com/team): who is behind HackerDNA.
- [Sign up or log in](https://hackerdna.com/auth/connect): create a free account to start training.

## Who publishes this site

HackerDNA is published by HACKERDNA, a French simplified joint-stock company
(Societe par Actions Simplifiee).

- Registered office: 11 Rue Lamartine, 64200 Biarritz, France
- Bayonne Trade and Companies Register (RCS) number: 105437107
- SIRET: 10543710700011
- Intra-EU VAT number: FR56105437107
- Contact: contact@hackerdna.com
- Infrastructure: Amazon Web Services, Europe (Ireland) region

These identifiers can be verified independently through the French public company
registry at https://annuaire-entreprises.data.gouv.fr.

## Ownership and business model

HackerDNA is independently owned. It is not owned by, funded by, or affiliated with
any other security training platform. Revenue comes solely from paid Pro and Max
subscriptions. There is also a free tier. Links to other training platforms in
HackerDNA articles are not monetised.

## Blog posts
- [SQL Injection Cheat Sheet 2026: Payloads & Bypasses](https://hackerdna.com/blog/sql-injection-cheat-sheet): SQL injection cheat sheet with copy-paste payloads for detection, auth bypass, UNION, blind, and WAF filter bypass across MySQL, MSSQL, Oracle, and Postgres.
- [Cyber Kill Chain: The 7 Stages of an Attack (2026)](https://hackerdna.com/blog/cyber-kill-chain): The cyber kill chain breaks every attack into 7 stages, from reconnaissance to data theft. Learn each phase, how to spot it, and how defenders break it.
- [Bug Bounty Hunting: Complete Beginner's Guide (2026)](https://hackerdna.com/blog/bug-bounty): Bug bounty hunting explained: how programs pay, what hackers really earn, the vulnerabilities that get rewarded, and a step-by-step start plan for 2026.
- [How to Become a Penetration Tester in 2026: Roadmap](https://hackerdna.com/blog/how-to-become-a-penetration-tester): How to become a penetration tester in 2026: a step-by-step roadmap covering skills, certifications, a portfolio that gets hired, and the real timeline.
- [Blind SQL Injection Explained: A 2026 Hacker's Guide](https://hackerdna.com/blog/blind-sql-injection): Blind SQL injection extracts data with no visible output. Learn boolean-based, time-based, and out-of-band exploitation, plus how to stop it for good in 2026.
- [OWASP API Security Top 10: The 2026 Guide With Examples](https://hackerdna.com/blog/owasp-api-security-top-10): The OWASP API Security Top 10 ranks the biggest API risks, from BOLA to SSRF. Learn how each attack works, how to test for it, and how to secure your APIs.
- [Cross-Site Scripting (XSS): The 2026 Attack Guide](https://hackerdna.com/blog/cross-site-scripting): Cross-site scripting (XSS) runs attacker JavaScript in a victim's browser. Learn reflected, stored, and DOM XSS with examples and the defenses that stop them.
- [SQL Injection Prevention: The Developer's Guide (2026)](https://hackerdna.com/blog/sql-injection-prevention): SQL injection prevention starts with parameterized queries. Learn the defenses that actually stop SQLi: prepared statements, validation, and least privilege.
- [Windows Privilege Escalation: Techniques Guide (2026)](https://hackerdna.com/blog/windows-privilege-escalation): Windows privilege escalation explained: enumerate the host, then abuse unquoted service paths, weak service ACLs, and Potato token attacks to reach SYSTEM.
- [Broken Access Control: OWASP #1 Risk Explained (2026)](https://hackerdna.com/blog/broken-access-control): Broken access control is OWASP's #1 web risk. Learn how IDOR and access control flaws work, real exploit examples, and how to prevent them. Practice in-browser.
- [Hack The Box Coupon 2026: Real Discounts That Work](https://hackerdna.com/blog/hack-the-box-coupon): Real ways to save on Hack The Box in 2026: the .edu student plan, seasonal Academy promo codes, annual VIP+ savings, and the coupon scams worth avoiding.
- [SSRF Attack: Server-Side Request Forgery Guide 2026](https://hackerdna.com/blog/ssrf): An SSRF attack tricks a server into fetching internal URLs. Learn how server-side request forgery works, real payloads, filter bypasses, and how to prevent it.
- [eJPT Certification 2026: Cost, Format & Is It Worth It?](https://hackerdna.com/blog/ejpt-certification): eJPT certification guide: the $249 exam, 48-hour hands-on format, 70% pass mark, a full prep plan, and whether INE's junior pentest cert is worth it in 2026.
- [How to Use Wireshark: A Beginner's Tutorial (2026)](https://hackerdna.com/blog/how-to-use-wireshark): Learn how to use Wireshark to capture and analyze network traffic. Master capture and display filters, follow the TCP stream, and practice in a browser lab.
- [Penetration Tester Salary in 2026: Real Numbers by Level](https://hackerdna.com/blog/penetration-tester-salary): Penetration tester salary in 2026: entry-level starts near $90K, seniors pass $200K. See real pay by experience, the OSCP bump, and how to earn more fast.
- [How to Use Gobuster for Directory Enumeration (2026)](https://hackerdna.com/blog/how-to-use-gobuster): Learn how to use Gobuster for fast directory, DNS, and vhost enumeration. Install it, master the key flags, filter false positives, and practice in real labs.
- [Linux Privilege Escalation: Techniques Guide (2026)](https://hackerdna.com/blog/linux-privilege-escalation): Linux privilege escalation explained: enumerate a shell, then abuse SUID binaries, sudo rules, capabilities, and cron jobs to reach root. With hands-on labs.
- [Privilege Escalation Explained: Linux & Windows Guide (2026)](https://hackerdna.com/blog/privilege-escalation): Privilege escalation explained: horizontal vs vertical types, real Linux and Windows techniques like GTFOBins and PwnKit, and how to defend against it in 2026.
- [Network Penetration Testing: 2026 Methodology Guide](https://hackerdna.com/blog/network-penetration-testing): Network penetration testing explained: internal vs external testing, the 5-phase methodology, and the tools real testers use, from Nmap to Responder. Try free.
- [OWASP Top 10 2025: Every Risk Explained with Examples](https://hackerdna.com/blog/owasp-top-10): The OWASP Top 10 2025 explained: all ten web application security risks, a real example for each, what changed from 2021, and how to practice them hands-on.
- [Reverse Shell Cheat Sheet 2026: One-Liners for Any Shell](https://hackerdna.com/blog/reverse-shell-cheat-sheet): Reverse shell cheat sheet with copy-paste one-liners for Bash, Python, PHP, netcat, and PowerShell. Catch the shell, upgrade to a full TTY, and practice live.
- [Cybersecurity Certifications 2026: Costs, Paths & Picks](https://hackerdna.com/blog/cybersecurity-certifications): Cybersecurity certifications ranked by what they actually get you in 2026: Security+, OSCP, PNPT, CySA+ and more, with real costs and a roadmap to choose.
- [Penetration Testing: A Complete Guide for Beginners (2026)](https://hackerdna.com/blog/penetration-testing): Penetration testing explained: what it is, the five phases, types, tools, and the methodology pentesters use in 2026. Learn it with hands-on browser labs.
- [Best Cybersecurity Affiliate Programs in 2026 (Compared)](https://hackerdna.com/blog/best-cybersecurity-affiliate-programs): Compare the 8 best cybersecurity affiliate programs in 2026. HackerDNA pays 30% recurring, TryHackMe 5%, Hack The Box runs B2B. See the full breakdown.
- [The Hands-On Feature Is Evolving: What's Coming Next](https://hackerdna.com/blog/evolving-hands-on): The Hands-On feature is evolving into a bigger Learn experience. Here is what is changing in the section today and what is coming next for HackerDNA learners.
- [What Is Hacking? A Hands-On Beginner's Guide for 2026](https://hackerdna.com/blog/what-is-hacking): What is hacking? Learn the types, five-phase methodology, tools, and legal limits with hands-on labs. A 2026 beginner's guide from working pentesters.
- [Reverse MD5: How to Decrypt and Crack an MD5 Hash (2026)](https://hackerdna.com/blog/reverse-md5): You cannot truly decrypt MD5, it is one-way. Learn how to reverse an MD5 hash: online lookup databases first, then crack it with Hashcat or John. Honest guide.
- [How to Use LinPEAS: Linux Privilege Escalation Guide](https://hackerdna.com/blog/how-to-use-linpeas): Learn how to use LinPEAS to find Linux privilege escalation vectors. Step-by-step install, scan, and output analysis guide with hands-on practice labs.
- [How to Use John the Ripper: Complete Tutorial (2026)](https://hackerdna.com/blog/how-to-use-john-the-ripper): Learn how to use John the Ripper to crack passwords. Hash identification, wordlist and rule modes, real-world hash types, plus John vs Hashcat. Hands-on guide.
- [Penetration Testing Tools: The 12 Essentials for 2026](https://hackerdna.com/blog/penetration-testing-tools): Best penetration testing tools used by working pentesters in 2026: Burp Suite, Nmap, Metasploit, sqlmap, GTFOBins, and 7 more. Practical use cases inside.
- [Web Application Penetration Testing: 2026 Methodology Guide](https://hackerdna.com/blog/web-application-penetration-testing): Web application penetration testing explained step by step. Learn the methodology, tools, and techniques used in real-world web app assessments. Start free.
- [Hash Cracking Tutorial: Hashcat and John the Ripper (2026)](https://hackerdna.com/blog/hash-cracking): Hash cracking tutorial with Hashcat and John the Ripper. Learn hash types, attack modes, wordlist selection, and rule-based cracking with hands-on examples.
- [What Is TryHackMe? An Honest Review and Guide for 2026](https://hackerdna.com/blog/what-is-tryhackme): What is TryHackMe? Learn how TryHackMe works, free vs premium pricing, certifications like SEC1 and PT1, pros and cons, and whether it is worth it in 2026.
- [What Is Hack The Box? Free vs Paid + How HTB Works (2026)](https://hackerdna.com/blog/what-is-hack-the-box): Hack The Box is a hands-on hacking training platform. See how HTB machines work, what the free tier really gets you, and if CPTS and CBBH are worth it.
- [Best Hack the Box Alternatives for Beginners in 2026](https://hackerdna.com/blog/hack-the-box-alternatives): Searching for hack the box alternatives? Compare the best cybersecurity learning platforms in 2026, with honest pricing breakdowns and beginner picks.
- [TryHackMe Pricing 2026: Free vs Premium, Is It Worth It?](https://hackerdna.com/blog/tryhackme-pricing): TryHackMe Premium costs $10-14/month depending on billing. See what the free tier actually includes, when Premium pays off, and how students save 20%.
- [CTF Categories: Types of Challenges, Tools & Examples (2026)](https://hackerdna.com/blog/ctf-categories): Explore every CTF category: web exploitation, cryptography, forensics, reverse engineering, pwn, and OSINT. Plus tools, examples, and which to start with.
- [Types of Hackers: White Hat vs Black Hat Explained 2026](https://hackerdna.com/blog/hacking-101): The 7 types of hackers explained: white hat, black hat, grey hat, script kiddie, hacktivist, APT, and insider. See how authorization draws the legal line.
- [CompTIA Security+ Exam Cost 2026: Fees, Bundles & Savings](https://hackerdna.com/blog/security-plus-certification-cost): CompTIA Security+ exam cost in 2026: $425 voucher, $474 with retake bundle, plus training options from free to $2,500. See where you can actually save.
- [TryHackMe SOC Level 1 Path: Complete 2026 Training Guide](https://hackerdna.com/blog/tryhackme-soc-level-1): Complete TryHackMe SOC Level 1 path guide for 2026. Learn modules, time to complete, cost, and how this SOC analyst training prepares you for security jobs.
- [TryHackMe Certifications 2026: SAL1 & PT1 Cost + Validity](https://hackerdna.com/blog/tryhackme-certifications): TryHackMe certifications compared: SAL1 ($349) and PT1 ($297) exam formats, whether employers actually recognize them, and how they compare with BTL1 and CySA+.
- [How to Use Telnet: Command Guide for Network Testing (2026)](https://hackerdna.com/blog/how-to-use-telnet): Master telnet commands for port testing and network troubleshooting. Enable telnet on Windows 11, Linux, and macOS. Step-by-step guide with examples (2026).
- [How to Use DirBuster: Directory Scanning Guide for 2026](https://hackerdna.com/blog/how-to-use-dirbuster): Learn how to use DirBuster for directory enumeration in 2026. Step-by-step tutorial covering Kali Linux installation, commands, wordlists, and GUI usage.
- [Gobuster Wordlist Guide: Best Lists for Directory Busting](https://hackerdna.com/blog/gobuster-wordlist): Learn which gobuster wordlist to use for directory enumeration. Discover the best wordlists, where to find them, and how to create custom lists in 2026.
- [OWASP Web Security Testing Guide: How to Use WSTG (2026)](https://hackerdna.com/blog/owasp-web-security-testing-guide): The OWASP Web Security Testing Guide (WSTG) explained: all five testing phases, WSTG test case IDs, and how to apply the checklist to real applications.
- [MetaCTF: 2026 Guide to the Cybersecurity Training Platform](https://hackerdna.com/blog/metactf): Learn everything about MetaCTF in 2026. Complete guide covering challenge categories, how to get started, essential tools, and tips for CTF beginners.
- [OverTheWire Wargames: Complete Beginner Guide in 2026](https://hackerdna.com/blog/overthewire-wargames-guide): Learn how to use OverTheWire wargames to build cybersecurity skills. This complete guide covers Bandit, Natas, and more with tips for beginners in 2026.
- [What Is a Network Security Key? Complete Guide for 2026](https://hackerdna.com/blog/network-security-key): Learn what a network security key is, how to find yours on Windows, Mac, and routers, and how to strengthen your Wi-Fi security. Beginner-friendly guide.
- [Burp Suite Tutorial 2026: Beginner Web Security Testing](https://hackerdna.com/blog/burp-suite-tutorial): Learn Burp Suite with this beginner-friendly tutorial. Master proxy setup, intercepting traffic, and finding web vulnerabilities step by step in 2026.
- [SQL Injection for Beginners: Examples and Prevention](https://hackerdna.com/blog/sql-injection-tutorial): Learn SQL injection from scratch. Understand how SQLi attacks work, explore real examples, and discover how to prevent them in your applications in 2026.
- [What Is a Port? Network Ports Explained for Beginners](https://hackerdna.com/blog/what-is-a-port): Learn what a port is in networking. Discover how network ports work, common port numbers, the three port types, and why they matter for cybersecurity.
- [Is Cybersecurity a Good Career? Honest Guide for 2026](https://hackerdna.com/blog/is-cybersecurity-a-good-career): Is cybersecurity a good career in 2026? Explore real salaries, job growth, career paths, and honest challenges to decide if this field is right for you.
- [How to Update Kali Linux: apt Commands That Work (2026)](https://hackerdna.com/blog/how-to-update-kali-linux): Update Kali Linux with sudo apt update && sudo apt full-upgrade -y. Step-by-step commands, fixes for common errors, and tips to keep your tools current.
- [CompTIA PenTest+ Certification (PT0-003): 2026 Exam Guide](https://hackerdna.com/blog/comptia-pentest-plus-certification): CompTIA PenTest+ certification guide for 2026: PT0-003 exam format and domains, cost, study resources, practice tips, and how it compares to OSCP and PNPT.
- [Msfvenom Cheat Sheet 2026: Copy-Paste Payload Commands](https://hackerdna.com/blog/msfvenom-cheat-sheet): Msfvenom cheat sheet with copy-paste one-liners for Windows, Linux, macOS, and web payloads. Reverse shells, bind shells, and shellcode commands for 2026.
- [PNPT Certification 2026: Cost, Exam Format & PNPT vs OSCP](https://hackerdna.com/blog/pnpt-certification): PNPT certification guide: $499 with a free retake, the 5-day practical exam plus report and live debrief, prep resources, and how PNPT compares to OSCP.
- [Hack The Box Academy Pricing 2026: Costs, CPTS & Worth It?](https://hackerdna.com/blog/hack-the-box-academy): Hack The Box Academy pricing for 2026: cube costs from $8, Silver and Gold annual plans, CPTS exam fees, and an honest verdict on whether HTB Academy pays off.
- [CTF Tools: Essential Hacking Toolkit for Beginners (2026)](https://hackerdna.com/blog/ctf-tools): Discover 40+ CTF tools for web exploitation, crypto, forensics, reverse engineering and pwn. Free toolkit guide for beginners with practical examples.
- [Nmap Cheat Sheet 2026: Every Command You Actually Need](https://hackerdna.com/blog/nmap-cheat-sheet): Nmap cheat sheet covering every command for network scanning, port discovery, service and OS detection, NSE scripts, and output formats. Updated for 2026.
- [15 Best Cybersecurity Labs: Free & Paid Compared (2026)](https://hackerdna.com/blog/cybersecurity-labs): Compare 15 cybersecurity labs for hands-on hacking practice, from free beginner platforms to advanced pentest ranges. Find your fit and start practicing.
- [PicoCTF Beginner Guide 2026: Start the Best Free CTF](https://hackerdna.com/blog/picoctf): PicoCTF is Carnegie Mellon's free CTF platform. Learn how it works, which challenge categories to start with, and the tips that take you from zero to solver.
- [How to Become a SOC Analyst in 2026: Complete Career Guide](https://hackerdna.com/blog/soc-analyst-career-guide): Want to become a SOC analyst in 2026? Skills, certifications, salary ranges, and a step-by-step path into security operations with no prior experience.
- [XSS vs CSRF: Key Differences, Examples, and Prevention](https://hackerdna.com/blog/xss-vs-csrf): XSS vs CSRF: see how each attack works, where they differ, real payload examples, and the defenses that stop them, from output encoding to CSRF tokens.
- [OSCP+ Roadmap 2026: Prep Guide to Pass on Your First Try](https://hackerdna.com/blog/oscp-preparation-guide): OSCP+ roadmap for 2026: exam changes, a realistic study timeline, the TJ Null machine list, and lab strategy to pass on your first attempt. Start here.
- [TryHackMe vs HackTheBox 2026: Pricing, Paths & Verdict](https://hackerdna.com/blog/tryhackme-vs-hackthebox): TryHackMe vs HackTheBox compared head-to-head: pricing, beginner-friendliness, learning paths, and certifications, with a clear verdict for your level.
- [TryHackMe Coupon 2026: Student Discounts & Legit Deals](https://hackerdna.com/blog/tryhackme-coupon): Get legit TryHackMe discounts in 2026: the 20% student discount on annual plans, seasonal promo codes, and the coupon scams to avoid. See what works now.
- [CTF for Beginners: How to Start Capture The Flag in 2026](https://hackerdna.com/blog/ctf-for-beginners): New to CTF? This beginner guide covers Capture The Flag competitions, the main challenge categories, tools worth installing, and solving your first flags.
- [How Do Hackers Learn to Hack? A Realistic Path for 2026](https://hackerdna.com/blog/how-do-hackers-learn-to-hack): How do hackers learn to hack? Follow a 4-stage roadmap: fundamentals, hands-on labs, CTFs, then specialization. Free resources and a realistic timeline.
- [Hack The Box vs Hacker Dna](https://hackerdna.com/blog/hack-the-box): Hack The Box vs HackerDNA: Explore the differences between these ethical hacking platforms, including features, labs, and training options, to find the best fit for your cybersecurity journey.