darkbb
✦ Legend ✦
Online
...
#1
Thailand
Top 1%
Mundial
18901
Total de XP
129
Labs Concluídos
0
Primeiros Sangues
54
Sequência
54
Recorde
Atividade
65 dias ativos no ultimo anoProgresso de Rank
✦ Legend ✦
Rank Maximo
Conquistas
Sequência Iniciante
Mestre da Sequência
Lenda da Sequência
Rato de Lab
Especialista de Lab
Mestre de Lab
Estudioso
Top 10
Membro Pro
API SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization BypassNetwork ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisJenkinsCI/CDDevOpsWeb SecurityPentestAutomationSession ManagementAuthenticationPHPLFIPassword CrackingAuthentication BypassDirectory TraversalPath ManipulationFile InclusionFlaskDebug ModePythonMemory AnalysisPath TraversalCGIFile AccessInput ValidationLogic FlawParameter ManipulationCommand InjectionWeb ExploitationNetwork SecuritySQL InjectionDatabase SecurityJWTToken AuthenticationCryptographyAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingJavaScriptClient-Side SecurityDOM ManipulationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionApache SecuritySystem AdministrationLog AnalysisFile UploadBypass TechniquesWeb ShellsPost ExploitationCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReuseShell CommandsHTTP Parameter ManipulationSecurity AssessmentServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation GatheringJinja2 ExploitationLDAP InjectionDirectory ServicesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationCookie ManipulationSUID BinariesLinux SecurityBinary ExploitationNoSQL InjectionMongoDBDocument DatabasesBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVisibility ControlsSecurity TestingOperator ExploitationGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryPDF SecurityDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationGraphQLSchema IntrospectionInjectionBrowser DevToolsFilter BypassApache AuthenticationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoveryWeb DevelopmentHexadecimalSteganographyImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisRainbow TablesBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisWeb InspectionHTML AnalysisQR Code AnalysisData ExtractionCryptanalysisClassical CryptoPattern RecognitionMemory ForensicsTool UsageROT13 EncodingFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsMetadataHidden DataForensic ToolsLSBAudio AnalysisTransposition CipherRail FenceKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsDNSPacket AnalysisData ExfiltrationBase64 DecodingZIP Password CrackingfcrackzipBrute ForceArchive SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksClassical CiphersHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingWindows RegistryPersistence AnalysisMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationFrequency AnalysisSecurity BypassClient-Side ManipulationIDORRace ConditionsTiming AttacksConcurrent ExploitationWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityURL ManipulationInternal Network AccessProtocol BypassPrompt InjectionLLM SecurityAI Red TeamingJailbreakOWASP LLM Top 10Guardrail BypassSystem Prompt LeakageExcessive AgencyNetwork ForensicsDNS AnalysisTraffic AnalysisDeobfuscationCode AnalysisEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationPolyalphabetic CiphersRequest SmugglingPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesType JugglingHash AnalysisGitVersion ControlReconnaissanceWeb EnumerationPassword AnalysisSecurity ToolsRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatCSSMedia QueriesWeb ForensicsSource AnalysisDevToolsUnicodeText AnalysisLinuxCommand LineFile System NavigationHidden FilesgrepfindFile Upload BypassPHP SecurityWeb Shell ExploitationOAuth 2.0Web ReconConfiguration ExploitsSSHSudoLinux CapabilitiesReverse ShellSystem EnumerationAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationFilter EvasionXORKnown-Plaintext AttackFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationFile EnumerationCron JobsConfiguration AnalysisWPJWT ManipulationSSH ExploitationLog InjectionMass AssignmentLinux Privilege EscalationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBSSTISSH Brute ForceApache TomcatWAR DeploymentDefault CredentialsMYSQLIRCECloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftMetadata Service AbuseAPI EnumerationGITHeadless CMSInformation DisclosureRevision HistoryToken AbuseWEBCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraHost Header InjectionPassword Reset PoisoningPickle DeserializationFile PermissionsAccess ControlIP SPOOFINGFTPCookie PoisoningSession TamperingSecurity Through ObscurityView SourceBroken Access ControlHTMLNmapNmap CommandsTelnetPort ScanningView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
API Breaker
Desafio
Red is Dead
Desafio
Snapchat Exposed
Desafio
Session Switch
Desafio
Corporate Breach
Desafio
Corporate Breach 2
Desafio
Flask Error
Desafio
Path Traversal
Desafio
API Logic Flaw
Desafio
Ping Pwn
Desafio
Auth Bypass
Desafio
JWT Bypass
Desafio
JWT Algo Confusion
Desafio
XXE Exposed
Desafio
JWT Claims Manipulation
Desafio
XSS Playground
Desafio
CSRF Bank Transfer
Desafio
URL Scanner
Desafio
LFI Log Poison
Desafio
File Upload Bypass
Desafio
Shell Command Scanner
Desafio
Template Injection
Desafio
Corporate Backup Deserializer
Desafio
IP Spoofing Admin
Desafio
Template Injector
Desafio
LDAP Injector
Desafio
Redis Cache Poisoner
Desafio
Cookie Forge
Desafio
SUID Privilege Hunter
Desafio
MongoDB Injector
Desafio
SQL Injection
Desafio
NoSQL Injection
Desafio
Git Secrets Hunter
Desafio
PDF Password Cracker
Desafio
Registry Hijacker
Desafio
GraphQL Gateway
Desafio
Button Activator
Desafio
File Include Bypass
Desafio
Corporate Directory Hunt
Desafio
Hex Hunt
Desafio
Stego Hunt
Desafio
Packet Pursuit
Fácil
Get the Password
Desafio
Binary Secrets
Desafio
Base64 Detective
Desafio
QR Code Quest
Desafio
Crypto Cipher
Desafio
Memory Forensics
Desafio
Log Hunter
Desafio
Blockchain Secrets
Desafio
PDF Trap
Desafio
Pixel Puzzler
Desafio
Sonic Cipher
Desafio
Rail Fence
Desafio
KeePass Breaker
Desafio
DNS Exfil
Desafio
ZIP Cracker
Desafio
Admin Portal Breach
Desafio
Book Cipher Challenge
Desafio
WiFi Password Cracker
Desafio
Registry Hunter
Desafio
WEP Cracker
Desafio
Caesar Shift Decoder
Desafio
Header Hijacker
Desafio
IDOR Explorer
Desafio
Race Condition Hunter
Desafio
WebDAV Explorer
Desafio
YAML Bomb
Desafio
Simple Directory Traversal
Desafio
Teste de injeção SQL
Desafio
SSRF Validator
Desafio
DNS Tunneling Detective
Desafio
Hack This Site
Desafio
Email Header Forensics
Desafio
Vigenère Stego Hunt
Desafio
HTTP Smuggling
Desafio
Prototype Pollution Hunter
Desafio
Type Juggling Bypass
Desafio
Git Exposed
Desafio
Backup Hunter
Desafio
Crack SHA1 Hash
Desafio
Regex Bypass to SQLi
Desafio
Office Password Cracker
Desafio
Windows Password Cracker
Desafio
Shadow Cracker
Desafio
Fine Print
Desafio
Phantom Text
Desafio
Prática de fundamentos Linux
Desafio
FiPloit
Fácil
Token Trust
Desafio
Matsudo
Médio
Internal
Difícil
Compromised 2
Difícil
RCE Playground
Médio
XOR Reuse
Desafio
Anonymous 2
Fácil
Broken Chain
Difícil
Scheduled Sabotage
Fácil
WP Ultimate
Difícil
Infiltrator
Fácil
Hack the Box
Difícil
FortiPy
Difícil
Compromised 1
Médio
Query Quake
Médio
Traversed
Médio
AlVault
Médio
Beyond Echo
Médio
Host Hijack
Médio
TechNova Infiltration
Médio
Pickle Jar
Médio
Alpwned
Médio
Hidden CMS Breach
Médio
ClearDesk
Médio
Cronpocalypse
Fácil
Spoof!
Fácil
Anonymous
Fácil
Include me
Fácil
Hack the Login
Muito Fácil
Dados anexados e carving
Fundamentos da esteganografia
Metadados e segredos EXIF
Steghide e quebra de senha
Esteganografia LSB em imagens
Detecções YARA e Sigma
Fundamentos da caça
Caça com MITRE ATT&CK
Fundamentos da inteligência
O programa de caça
IOCs, feeds e plataformas
Caça em endpoint e rede
O ciclo de caça
Daily Hack Solved
- The codes the page had to know
+10 XP
18 hours ago
Daily Hack Solved
- The word you already know
+10 XP
1 day ago
Daily Hack Solved
- The claim inside the claim
+10 XP
2 days ago
Streak Frozen
3 days ago
Streak Frozen
4 days ago
Daily Hack Solved
- The second factor in the backup
+10 XP
5 days ago
Daily Hack Solved
- The header that says where you are
+10 XP
6 days ago
Daily Hack Solved
- After the last byte
+10 XP
1 week ago
Daily Hack Solved
- Every road leads there
+10 XP
1 week ago
Flag Found
- API Breaker
+50 XP
1 week ago
Flag Found
- Red is Dead
+50 XP
1 week ago
Flag Found
- Snapchat Exposed
+50 XP
1 week ago
Flag Found
- Session Switch
+50 XP
1 week ago
Flag Found
- Corporate Breach
+50 XP
1 week ago
Flag Found
- Corporate Breach 2
+50 XP
1 week ago
Flag Found
- Flask Error
+50 XP
1 week ago
Flag Found
- Path Traversal
+50 XP
1 week ago
Flag Found
- API Logic Flaw
+50 XP
1 week ago
Flag Found
- Ping Pwn
+50 XP
1 week ago
Daily Hack Solved
- Instructions in the wiki
+10 XP
1 week ago
Ativo por 1 dias
1 week ago
Flag Found
- Auth Bypass
+50 XP
1 week ago
Flag Found
- JWT Bypass
+50 XP
1 week ago
Flag Found
- JWT Algo Confusion
+50 XP
1 week ago
Lesson Completed
+10 XP
1 week ago
Flag Found
- XXE Exposed
+50 XP
1 week ago
Daily Hack Solved
- Write it back
+10 XP
1 week ago
Profile Updated
+3 XP
1 week ago
Flag Found
- JWT Claims Manipulation
+50 XP
1 week ago
Flag Found
- XSS Playground
+50 XP
1 week ago
Daily Hack Solved
- Approved by somebody else
+10 XP
1 week ago
Daily Hack Solved
- The trigger that changed everything
+10 XP
1 week ago
Ativo por 1 dias
2 weeks ago
Flag Found
- CSRF Bank Transfer
+50 XP
2 weeks ago
Daily Hack Solved
- The light that talks
+10 XP
2 weeks ago
Daily Hack Solved
- One page of six
+10 XP
2 weeks ago
Daily Hack Solved
- Bigger than it says
+10 XP
2 weeks ago
Daily Hack Solved
- The fill that was arranged
+10 XP
2 weeks ago
Daily Hack Solved
- The sender nobody owns
+10 XP
2 weeks ago
Daily Hack Solved
- The invite that made an owner
+10 XP
2 weeks ago
Ativo por 1 dias
3 weeks ago
Daily Hack Solved
- The cert that named it
+10 XP
3 weeks ago
Flag Found
- URL Scanner
+50 XP
3 weeks ago
Daily Hack Solved
- Where the link really goes
+10 XP
3 weeks ago
Flag Found
- LFI Log Poison
+50 XP
3 weeks ago
Daily Hack Solved
- The allowlist that isn't
+10 XP
3 weeks ago
Daily Hack Solved
- Three keys, one account
+10 XP
3 weeks ago
Daily Hack Solved
- The canary build
+10 XP
3 weeks ago
Daily Hack Solved
- The gateway that appeared
+10 XP
3 weeks ago
Flag Found
- File Upload Bypass
+50 XP
4 weeks ago