3xpl0it3r
✦ Legend ✦
It's the story of the moon and the ocean. It begins where it ends.
Atividade
120 dias ativos no ultimo ano
Menos
Mais
Progresso de Rank
✦ Legend ✦
Rank Maximo
Conquistas
Primeiro Sangue
Caçador de Sangue
Sequência Iniciante
Mestre da Sequência
Rato de Lab
Especialista de Lab
Mestre de Lab
Estudioso
Escritor
Top 10
Membro Pro
Web Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingCryptographyXORKnown-Plaintext AttackHex EncodingReverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraSSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationWeb ExploitationHeadless CMSInformation DisclosureRevision HistoryToken AbusePythonPickle DeserializationRCELinuxIDORAPI SecurityPath TraversalAccess ControlOAuth 2.0JWTWeb ReconConfiguration ExploitsHost Header InjectionPassword Reset PoisoningHTTP HeadersCSSMedia QueriesWeb ForensicsSource AnalysisDevToolsUnicodeSteganographyText AnalysisSSHFile EnumerationCron JobsConfiguration AnalysisCommand LineFile System NavigationHidden FilesgrepfindDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperWeb EnumerationAuthenticationClient-Side SecuritySecurity Through ObscurityBrowser DevToolsView SourceBroken Access ControlHTMLPassword CrackingLinux SecurityJohn the RipperhashcatCVE ExploitationWindows SecurityNTLMHashcatHash AnalysisSQL InjectionRegex BypassInput ValidationSQLiteUNION-Based SQLiOffice SecurityHash ExtractionGitVersion ControlSource Code AnalysisReconnaissanceURL ManipulationInternal Network AccessProtocol BypassEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationClassical CiphersImage AnalysisPolyalphabetic CiphersHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisJavaScriptDeobfuscationCode AnalysisAuthentication BypassDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessSSTIFlask SecuritySSH Brute ForceDatabase EnumerationPHPType JugglingPassword AnalysisSecurity ToolsDatabase SecurityFile DiscoveryInformation GatheringYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesParameter ManipulationAuthorization BypassSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationCookie ManipulationCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDOM ManipulationGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationIP SpoofingAccess Control BypassSUID BinariesFrequency AnalysisPattern RecognitionDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFilter EvasionNoSQL InjectionMongoDBDocument DatabasesLDAP InjectionDirectory ServicesEnterprise SecurityJWT ManipulationSSH ExploitationLog InjectionServer-Side Template InjectionJinja2 ExploitationWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationDigital ForensicsWindows RegistryPersistence AnalysisIncident ResponseMalware AnalysisWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationVisibility ControlsSecurity TestingOperator ExploitationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementFile PermissionsBypass TechniquesWeb ShellsPost ExploitationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2XSSCross-Site ScriptingStored XSSSession HijackingClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityAlgorithm ConfusionRS256HS256Token ForgeryToken AuthenticationService DiscoveryCommand Line ToolsForensicsAttack DetectionLogic FlawCGIFlaskDebug ModeMemory AnalysisTransposition CipherRail FenceAudio AnalysisLSBPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionNetwork AnalysisDNSCryptanalysisClassical CryptoData EncodingSession ManagementJenkinsCI/CDDevOpsPentestAutomationNetwork ReconnaissanceDatabase ForensicsCLI UsageData RecoveryBase64RedisMemory ForensicsTool UsageROT13 EncodingWeb HackingLogic FlawsToken ManipulationBase64 EncodingQR Code AnalysisWeb InspectionHTML AnalysisHex EditorsData StructuresMD5Rainbow TablesWeb DevelopmentWebCTF BasicsPacket CaptureWiresharkProtocol AnalysisHexadecimalFile Upload BypassPHP SecurityWeb Shell ExploitationWEBAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationReverse ShellSystem EnumerationWPApache TomcatWAR DeploymentDefault CredentialsSudoMYSQLIGITFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsNmapNmap CommandsTelnetPort ScanningCookie PoisoningSession TamperingIP SPOOFINGView Source Code
XOR Reuse
Desafio
Pickle Jar
Médio
ClearDesk
Médio
Token Trust
Desafio
Host Hijack
Médio
Fine Print
Desafio
Phantom Text
Desafio
Scheduled Sabotage
Fácil
Prática de fundamentos Linux
Desafio
Hack the Box
Difícil
Hidden CMS Breach
Médio
Shadow Cracker
Desafio
TechNova Infiltration
Médio
Windows Password Cracker
Desafio
Regex Bypass to SQLi
Desafio
Office Password Cracker
Desafio
Git Exposed
Desafio
SSRF Validator
Desafio
Email Header Forensics
Desafio
Vigenère Stego Hunt
Desafio
HTTP Smuggling
Desafio
Hack This Site
Desafio
Simple Directory Traversal
Desafio
FortiPy
Difícil
Type Juggling Bypass
Desafio
Crack SHA1 Hash
Desafio
Teste de injeção SQL
Desafio
Backup Hunter
Desafio
YAML Bomb
Desafio
WebDAV Explorer
Desafio
Race Condition Hunter
Desafio
Prototype Pollution Hunter
Desafio
IDOR Explorer
Desafio
Header Hijacker
Desafio
Corporate Directory Hunt
Desafio
File Include Bypass
Desafio
Cookie Forge
Desafio
Redis Cache Poisoner
Desafio
Button Activator
Desafio
GraphQL Gateway
Desafio
DNS Tunneling Detective
Desafio
IP Spoofing Admin
Desafio
SUID Privilege Hunter
Desafio
Caesar Shift Decoder
Desafio
Registry Hijacker
Desafio
RCE Playground
Médio
MongoDB Injector
Desafio
LDAP Injector
Desafio
Infiltrator
Fácil
Template Injector
Desafio
WEP Cracker
Desafio
Registry Hunter
Desafio
WiFi Password Cracker
Desafio
Corporate Backup Deserializer
Desafio
Book Cipher Challenge
Desafio
Admin Portal Breach
Desafio
Git Secrets Hunter
Desafio
ZIP Cracker
Desafio
KeePass Breaker
Desafio
Template Injection
Desafio
PDF Password Cracker
Desafio
LFI Log Poison
Desafio
Shell Command Scanner
Desafio
NoSQL Injection
Desafio
CSRF Bank Transfer
Desafio
Alpwned
Médio
File Upload Bypass
Desafio
URL Scanner
Desafio
XSS Playground
Desafio
JWT Claims Manipulation
Desafio
SQL Injection
Desafio
XXE Exposed
Desafio
JWT Algo Confusion
Desafio
JWT Bypass
Desafio
Ping Pwn
Desafio
Auth Bypass
Desafio
Log Hunter
Desafio
API Logic Flaw
Desafio
Path Traversal
Desafio
Flask Error
Desafio
Rail Fence
Desafio
Sonic Cipher
Desafio
Pixel Puzzler
Desafio
PDF Trap
Desafio
Blockchain Secrets
Desafio
Corporate Breach 2
Desafio
Corporate Breach
Desafio
DNS Exfil
Desafio
Crypto Cipher
Desafio
Session Switch
Desafio
Snapchat Exposed
Desafio
Red is Dead
Desafio
Memory Forensics
Desafio
API Breaker
Desafio
QR Code Quest
Desafio
Base64 Detective
Desafio
Binary Secrets
Desafio
Get the Password
Desafio
Stego Hunt
Desafio
Packet Pursuit
Desafio
Hex Hunt
Desafio
FiPloit
Fácil
AlVault
Médio
Compromised 2
Difícil
Broken Chain
Difícil
Internal
Difícil
WP Ultimate
Difícil
Compromised 1
Médio
Query Quake
Médio
Matsudo
Médio
Traversed
Médio
Beyond Echo
Médio
Cronpocalypse
Fácil
Anonymous 2
Fácil
Anonymous
Fácil
Hack the Login
Muito Fácil
Spoof!
Fácil
Include me
Fácil
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Rainbow tables
Quebra de wireless
Quebra de PDF
Quebra de hashes Linux
Quebra de Documentos Office
Quebra de ZIP
Ataques de força bruta
Fundamentos de senhas
Ataques de dicionário
Quebra de hashes Windows
Fundamentos de privesc Linux
Reconhecimento ativo
Pós-exploração
Pivoteamento
Exploração de serviços
Relatórios de pentest
Ataques de senha
Ataques MITM
Varredura de vulnerabilidades
Fundamentos de rede
Enumeração de serviços
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Ataques Web
12
Ataques CSRF
Injeção XXE
SSRF
Inclusão de Arquivos
Intro Segurança Web
SSTI
Desserialização
Ataques File Upload
Ataques XSS
Bypass de Auth
Injeção SQL
Injeção de Comandos
Fundamentos JWT
Adulteração JWT
Quebra de JWT
Confusão de Algoritmo
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Daily Hack Solved
- Decode the stored credential
+10 XP
2 weeks ago
Ativo por 1 dias
3 weeks ago
Daily Hack Solved
- Read the system prompt
+10 XP
3 weeks ago
Flag Found
- Pwnify - Teste de Invasão de Aplicação Web
+350 XP
3 weeks ago
Flag Found
- Pwnify - Teste de Invasão de Aplicação Web
+350 XP
3 weeks ago
Daily Hack Solved
- Reverse then ROT
+10 XP
3 weeks ago
Flag Found
- XOR Reuse
+50 XP
3 weeks ago
Flag Found
- Engenharia Reversa: Crackme de Chave de Licença
+200 XP
3 weeks ago
Flag Found
- Engenharia Reversa: Crackme de Chave de Licença
+200 XP
3 weeks ago
Flag Found
- Ataque SSRF: roube credenciais de metadados na nuvem
+200 XP
3 weeks ago
Flag Found
- Ataque SSRF: roube credenciais de metadados na nuvem
+200 XP
3 weeks ago
Task Completed
- Ataque SSRF: roube credenciais de metadados na nuvem
3 weeks ago
Task Completed
- Ataque SSRF: roube credenciais de metadados na nuvem
3 weeks ago
Daily Hack Solved
- ELF, not data
+10 XP
3 weeks ago
Daily Hack Solved
- The webview endpoint
+10 XP
3 weeks ago
Daily Hack Solved
- Loot the instance role
+10 XP
1 month ago
Ativo por 2 dias
1 month ago
Daily Hack Solved
- Trace the port scan
+10 XP
1 month ago
Ativo por 3 dias
2 months ago
Flag Found
- Vazamento Mythos - Exposição de rascunhos de CMS headless
+200 XP
3 months ago
Flag Found
- Vazamento Mythos - Exposição de rascunhos de CMS headless
+200 XP
3 months ago
Ativo por 3 dias
3 months ago
Flag Found
- Pickle Jar
+200 XP
5 months ago
Flag Found
- Pickle Jar
+200 XP
5 months ago
Ativo por 9 dias
5 months ago
Flag Found
- ClearDesk
+200 XP
6 months ago
Flag Found
- ClearDesk
+200 XP
6 months ago
Flag Found
- Token Trust
+50 XP
6 months ago
Flag Found
- Host Hijack
+200 XP
6 months ago
Flag Found
- Host Hijack
+200 XP
6 months ago
Ativo por 4 dias
6 months ago
Flag Found
- Fine Print
+50 XP
6 months ago
Ativo por 1 dias
7 months ago
Flag Found
- Phantom Text
+50 XP
7 months ago