captainB
Grandmaster
Atividade
79 dias ativos no ultimo ano
Menos
Mais
Progresso de Rank
Grandmaster
✦ Legend ✦
16277 / 17284 XP
Conquistas
Sequência Iniciante
Mestre da Sequência
Rato de Lab
Especialista de Lab
Mestre de Lab
Estudioso
Web ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePrivilege EscalationWeb Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingPythonPickle DeserializationRCELinuxHost Header InjectionPassword Reset PoisoningHTTP HeadersIDORAPI SecurityPath TraversalAccess ControlDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBWeb EnumerationAuthenticationClient-Side SecuritySecurity Through ObscurityBrowser DevToolsView SourceBroken Access ControlHTMLPassword CrackingLinux SecurityJohn the RipperhashcatCryptographyWindows SecurityNTLMHashcatHash AnalysisSSHCVE ExploitationGitVersion ControlSource Code AnalysisReconnaissancePHPType JugglingAuthentication BypassPassword AnalysisSecurity ToolsSQL InjectionDatabase SecurityInput ValidationJavaScriptDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSSTIFlask SecuritySSH Brute ForceDatabase EnumerationSteganographyClassical CiphersImage AnalysisPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesParameter ManipulationAuthorization BypassSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisBypass TechniquesWeb ShellsSocial EngineeringPost ExploitationJWTToken AuthenticationLogic FlawFlaskDebug ModeMemory AnalysisCryptanalysisClassical CryptoPattern RecognitionData EncodingJenkinsCI/CDDevOpsPentestAutomationMemory ForensicsBinary AnalysisDigital ForensicsIncident ResponseTool UsageData RecoveryROT13 EncodingNetwork ReconnaissanceService DiscoveryDatabase ForensicsCLI UsageBase64Hex EncodingRedisQR Code AnalysisData ExtractionWeb InspectionHTML AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisMD5Rainbow TablesWeb DevelopmentWebCTF BasicsHexadecimalDOM ManipulationCookie ManipulationGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationFrequency AnalysisDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationJWT ManipulationSSH ExploitationLog InjectionSUID BinariesNoSQL InjectionMongoDBDocument DatabasesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationLDAP InjectionDirectory ServicesEnterprise SecurityServer-Side Template InjectionJinja2 ExploitationFilter EvasionWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityIP SpoofingAccess Control BypassInformation GatheringWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationWindows RegistryPersistence AnalysisMalware AnalysisHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingfcrackzipBrute ForceArchive SecurityJinja2Web Application TestingCode InjectionCGIPDF SecurityDocument SecurityBrute Force AttacksVisibility ControlsSecurity TestingOperator ExploitationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2CSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementFile PermissionsXSSCross-Site ScriptingStored XSSSession HijackingClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityAlgorithm ConfusionRS256HS256Token ForgeryFile DiscoveryCommand Line ToolsForensicsAttack DetectionTransposition CipherRail FenceAudio AnalysisLSBPDF ForensicsMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisLFIFile InclusionDNSMYSQLISession ManagementReverse ShellSystem EnumerationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationWPAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationSudoFile Upload BypassPHP SecurityWeb Shell ExploitationBroken AuthenticationDeveloper ToolsLearning PathWeb HackingLogic FlawsToken ManipulationBase64 EncodingGITIP SPOOFINGApache TomcatWAR DeploymentDefault CredentialsWEBFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPNmapNmap CommandsTelnetPort ScanningCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsView Source CodeCookie PoisoningSession Tampering
Pickle Jar
Médio
Host Hijack
Médio
ClearDesk
Médio
Hack the Box
Difícil
Hidden CMS Breach
Médio
Shadow Cracker
Desafio
Windows Password Cracker
Desafio
TechNova Infiltration
Médio
Git Exposed
Desafio
Type Juggling Bypass
Desafio
Crack SHA1 Hash
Desafio
Teste de injeção SQL
Desafio
Hack This Site
Desafio
HTTP Smuggling
Desafio
Email Header Forensics
Desafio
SSRF Validator
Desafio
FortiPy
Difícil
Vigenère Stego Hunt
Desafio
Simple Directory Traversal
Desafio
WebDAV Explorer
Desafio
YAML Bomb
Desafio
Race Condition Hunter
Desafio
Prototype Pollution Hunter
Desafio
IDOR Explorer
Desafio
Header Hijacker
Desafio
Corporate Directory Hunt
Desafio
File Include Bypass
Desafio
Packet Pursuit
Desafio
Shell Command Scanner
Desafio
LFI Log Poison
Desafio
File Upload Bypass
Desafio
JWT Bypass
Desafio
API Logic Flaw
Desafio
Flask Error
Desafio
Crypto Cipher
Desafio
Snapchat Exposed
Desafio
Memory Forensics
Desafio
Red is Dead
Desafio
QR Code Quest
Desafio
Base64 Detective
Desafio
Binary Secrets
Desafio
Get the Password
Desafio
Stego Hunt
Desafio
Hex Hunt
Desafio
Button Activator
Desafio
Cookie Forge
Desafio
GraphQL Gateway
Desafio
DNS Tunneling Detective
Desafio
Caesar Shift Decoder
Desafio
Registry Hijacker
Desafio
Infiltrator
Fácil
SUID Privilege Hunter
Desafio
MongoDB Injector
Desafio
Redis Cache Poisoner
Desafio
LDAP Injector
Desafio
Template Injector
Desafio
RCE Playground
Médio
WiFi Password Cracker
Desafio
IP Spoofing Admin
Desafio
WEP Cracker
Desafio
Registry Hunter
Desafio
Book Cipher Challenge
Desafio
Admin Portal Breach
Desafio
Git Secrets Hunter
Desafio
Corporate Backup Deserializer
Desafio
KeePass Breaker
Desafio
ZIP Cracker
Desafio
Template Injection
Desafio
Path Traversal
Desafio
PDF Password Cracker
Desafio
NoSQL Injection
Desafio
URL Scanner
Desafio
CSRF Bank Transfer
Desafio
Alpwned
Médio
XSS Playground
Desafio
JWT Claims Manipulation
Desafio
SQL Injection
Desafio
XXE Exposed
Desafio
JWT Algo Confusion
Desafio
Auth Bypass
Desafio
Ping Pwn
Desafio
Log Hunter
Desafio
Rail Fence
Desafio
Sonic Cipher
Desafio
Pixel Puzzler
Desafio
PDF Trap
Desafio
Blockchain Secrets
Desafio
Corporate Breach 2
Desafio
Corporate Breach
Desafio
DNS Exfil
Desafio
Query Quake
Médio
Session Switch
Desafio
Internal
Difícil
Broken Chain
Difícil
WP Ultimate
Difícil
Compromised 2
Difícil
Matsudo
Médio
FiPloit
Fácil
Hack the Login
Muito Fácil
API Breaker
Desafio
Traversed
Médio
Spoof!
Fácil
Compromised 1
Médio
AlVault
Médio
Beyond Echo
Médio
Cronpocalypse
Fácil
Anonymous 2
Fácil
Include me
Fácil
Anonymous
Fácil
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Rainbow tables
Quebra de wireless
Quebra de PDF
Quebra de hashes Linux
Quebra de Documentos Office
Quebra de ZIP
Ataques de força bruta
Fundamentos de senhas
Ataques de dicionário
Quebra de hashes Windows
Fundamentos de rede
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Ataques Web
12
Ataques CSRF
Injeção XXE
SSRF
Inclusão de Arquivos
Intro Segurança Web
SSTI
Desserialização
Ataques File Upload
Ataques XSS
Bypass de Auth
Injeção SQL
Injeção de Comandos
Fundamentos JWT
Adulteração JWT
Quebra de JWT
Confusão de Algoritmo
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Ativo por 1 dias
2 months ago
Flag Found
- Vazamento Mythos - Exposição de rascunhos de CMS headless
+200 XP
3 months ago
Flag Found
- Vazamento Mythos - Exposição de rascunhos de CMS headless
+200 XP
3 months ago
Flag Found
- Pwnify - Teste de Invasão de Aplicação Web
+350 XP
3 months ago
Flag Found
- Pwnify - Teste de Invasão de Aplicação Web
+350 XP
3 months ago
Ativo por 9 dias
3 months ago
Flag Found
- Pickle Jar
+200 XP
4 months ago
Flag Found
- Pickle Jar
+200 XP
4 months ago
Flag Found
- Host Hijack
+200 XP
4 months ago
Flag Found
- Host Hijack
+200 XP
4 months ago
Flag Found
- ClearDesk
+200 XP
4 months ago
Flag Found
- ClearDesk
+200 XP
4 months ago
Ativo por 9 dias
4 months ago
Chapter Completed
- Fundamentos de rede
+1 XP
8 months ago
Flag Found
- Hack the Box
+350 XP
8 months ago
Flag Found
- Hack the Box
+350 XP
8 months ago
Ativo por 5 dias
8 months ago
Flag Found
- Hidden CMS Breach
+200 XP
9 months ago
Flag Found
- Hidden CMS Breach
+200 XP
9 months ago
Ativo por 8 dias
9 months ago
Chapter Completed
- Quebra de hashes Linux
+1 XP
9 months ago
Flag Found
- Secrets in Source 2: contornar a segurança por obscuridade
+50 XP
9 months ago
Ativo por 1 dias
9 months ago