H3xCore
Master
Live Ranking
#15
Best: #12
Total Points
822
Total Earned
Labs Completed
47
47 User • 15 Root
Modules
7
Validated
First Bloods
0
First to Complete
Best Streak
26
Days
Skills Acquired
Technical skills practiced through completed labs
UnicodeSteganographyWeb ForensicsPythonText AnalysisPDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksFlaskDebug ModeWeb SecurityMemory AnalysisWireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol ExploitationJWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationLinux SecurityLinuxSSHFile EnumerationCron JobsConfiguration AnalysisLocal File InclusionFilter BypassApache AuthenticationJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityWeb DevelopmentHexadecimalPHPRCEHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisMYSQLIDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisWebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation GatheringGitVersion ControlSource Code AnalysisReconnaissanceCryptographyHash CrackingPassword AnalysisSecurity ToolsIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationMD5Rainbow TablesOffice SecurityHash ExtractionHashcatWindows SecurityNTLMHash AnalysisWeb Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationWeb EnumerationCVE ExploitationPath InjectionFile System SecurityInput ValidationPath ManipulationFile AccessSSRFURL ManipulationInternal Network AccessProtocol BypassIP SPOOFINGLFIhashcatCommand LineFile System NavigationHidden FilesgrepfindSQL InjectionAuthentication BypassLinux Privilege EscalationFile PermissionsLinux CapabilitiesReverse ShellSystem EnumerationNetwork ReconnaissanceApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsPenetration TestingAuthenticationFile Upload BypassPHP SecurityWeb Shell ExploitationLog AnalysisFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPHTMLLearning PathWEBWebTELNETNetworkingWeb Services
Completed Modules
Educational modules successfully validated
HTTP Header Manipulation: IP Spoofing
3 modulesRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Bug Bounty
1 modulesRecon fundamentals
Remote Code Execution (RCE)
3 modulesShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Completed Labs & Challenges
Hands-on cybersecurity challenges successfully completed
Phantom Text
Challenge
UnicodeSteganographyWeb ForensicsPythonText Analysis
PDF Password Cracker
Challenge
PDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force Attacks
Flask Error
Challenge
FlaskDebug ModePythonWeb SecurityMemory Analysis
WEP Cracker
Challenge
Wireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol Exploitation
Infiltrator
Easy
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
Scheduled Sabotage
Easy
LinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration Analysis
File Include Bypass
Challenge
Local File InclusionFilter BypassApache AuthenticationPassword Cracking
Button Activator
Challenge
JavaScriptBrowser DevToolsDOM ManipulationClient-Side Security
Hex Hunt
Challenge
JavaScriptWeb DevelopmentHexadecimalBrowser DevTools
Beyond Echo
Medium
PHPRCE
Cronpocalypse
Easy
SSH
HTTP Smuggling
Challenge
HTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisWeb SecurityPacket Analysis
Query Quake
Medium
MYSQLIRCE
Hack the Box
Hard
Directory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDB
Blockchain Secrets
Challenge
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic Analysis
WebDAV Explorer
Challenge
WebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System Enumeration
Email Header Forensics
Challenge
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
ZIP Cracker
Challenge
ZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive Security
IP Spoofing Admin
Challenge
Web SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation Gathering
Git Exposed
Challenge
GitVersion ControlSource Code AnalysisReconnaissanceWeb Security
Crack SHA1 Hash
Challenge
CryptographyHash CrackingPassword AnalysisSecurity Tools
Broken Chain
Hard
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
Get the Password
Challenge
JavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevTools
Office Password Cracker
Challenge
Password CrackingOffice SecurityHash ExtractionJohn the RipperHashcat
Windows Password Cracker
Challenge
Password CrackingWindows SecurityNTLMHashcatJohn the RipperHash Analysis
FortiPy
Hard
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
TechNova Infiltration
Medium
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Simple Directory Traversal
Challenge
Directory TraversalPath InjectionFile System SecurityWeb SecurityInput ValidationPath ManipulationFile Access
SSRF Validator
Challenge
SSRFWeb SecurityURL ManipulationInternal Network AccessProtocol Bypass
Spoof!
Easy
IP SPOOFING
Include me
Easy
PHPLFI
Shadow Cracker
Challenge
Password CrackingLinux SecurityJohn the RipperhashcatCryptography
Linux Fundamentals Practice
Challenge
LinuxCommand LineFile System NavigationHidden Filesgrepfind
Alpwned
Medium
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
Internal
Hard
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
Compromised 1
Medium
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Matsudo
Medium
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Hidden CMS Breach
Medium
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
FiPloit
Easy
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Anonymous 2
Easy
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Anonymous
Easy
FTP
Secrets in Source 2
Very Easy
Web SecurityHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning Path
Hack the Cookie
Very Easy
WEBLearning Path
Hack the Login
Very Easy
WebAuthenticationClient-Side SecurityLearning Path
Nmap Lab 102
Very Easy
TELNETLearning Path
Secrets in Source
Very Easy
HTMLLearning Path
Onboarding Lab: Access and Flags
Very Easy
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Courses Progress
Your learning paths and modules