iamwei
Master
Ranking
#18
Melhor: #4
Total de Pontos
791
Total Ganho
Labs Concluídos
63
65 User • 8 Root
Módulos
23
Validados
Primeiros Sangues
14
Primeiro a Concluir
Melhor Sequência
2
Dias
Habilidades Adquiridas
Habilidades técnicas praticadas através dos labs concluídos
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationRace ConditionsTiming AttacksConcurrent ExploitationWeb Application SecurityJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisCryptographyClassical CiphersFrequency AnalysisPattern RecognitionCommand InjectionLinux CapabilitiesPrivilege EscalationReverse ShellSystem EnumerationNetwork ReconnaissanceWeb SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation GatheringWireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol ExploitationDigital ForensicsWindows RegistryPersistence AnalysisIncident ResponseMalware AnalysisCryptanalysisClassical CryptoData EncodingSession ManagementAuthenticationPHPMemory ForensicsBinary AnalysisTool UsageData RecoveryROT13 EncodingAPI SecurityWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassMD5 CrackingSource Code AnalysisPassword AttacksAuthentication BypassGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryBase64Web InspectionHTML AnalysisNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisSteganographyImage AnalysisWebCTF BasicsShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity AssessmentServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPDF SecurityPassword CrackingDictionary AttacksDocument SecurityBrute Force AttacksXSSCross-Site ScriptingStored XSSSession HijackingLocal File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalApache SecurityLog AnalysisNoSQL InjectionMongoDBVisibility ControlsSecurity TestingOperator ExploitationSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityAWS EC2SQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityJWTToken AuthenticationWeb ExploitationService DiscoveryFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionPath TraversalCGIFile AccessInput ValidationFlaskDebug ModePythonMemory AnalysisTransposition CipherRail FenceAudio AnalysisLSBPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIPath ManipulationFile InclusionDNSJenkinsCI/CDDevOpsPentestAutomationDatabase ForensicsCLI UsageHex EncodingRedisQR Code AnalysisHex EditorsData StructuresReverse EngineeringMD5Rainbow TablesWeb DevelopmentHexadecimalSSHNetworkingReconnaissanceCommand LineWeb ServicesLearning PathWEBTELNETWPAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationGITBrute ForceLinuxSudoApache TomcatWAR DeploymentDefault CredentialsWeb ShellsFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGRCEFTPHTML
Módulos Concluídos
Módulos educacionais validados com sucesso
Nmap Mastery: Dominate Network Scanning
4 módulosInstalling Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
HTTP Header Manipulation: IP Spoofing
3 módulosRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
HDNA Ethical Hacking Course
5 módulos1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Ataques Web
5 módulosAtaques CSRF
SSRF
Intro Segurança Web
Ataques XSS
Injeção SQL
Ataques JWT
3 módulosFundamentos JWT
Quebra de JWT
Confusão de Algoritmo
Remote Code Execution (RCE)
3 módulosShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Labs & Desafios Concluídos
Desafios práticos de cibersegurança concluídos com sucesso
Email Header Forensics
Desafio
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
Race Condition Hunter
Desafio
Race ConditionsTiming AttacksConcurrent ExploitationWeb Application Security
Button Activator
Desafio
JavaScriptBrowser DevToolsDOM ManipulationClient-Side Security
DNS Tunneling Detective
Desafio
Network ForensicsDNS AnalysisData ExfiltrationTraffic Analysis
Caesar Shift Decoder
Desafio
CryptographyClassical CiphersFrequency AnalysisPattern Recognition
Internal
Difícil
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
IP Spoofing Admin
Desafio
Web SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation Gathering
WEP Cracker
Desafio
Wireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol Exploitation
Registry Hunter
Desafio
Digital ForensicsWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware Analysis
Crypto Cipher
Desafio
CryptanalysisClassical CryptoPattern RecognitionData Encoding
Session Switch
Desafio
Web SecuritySession ManagementAuthenticationPrivilege EscalationPHP
Memory Forensics
Desafio
Memory ForensicsBinary AnalysisDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 Encoding
API Breaker
Desafio
API SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization Bypass
Admin Portal Breach
Desafio
Client-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksAuthentication Bypass
Git Secrets Hunter
Desafio
Git ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINT
Base64 Detective
Desafio
Base64Web InspectionBrowser DevToolsData EncodingHTML Analysis
Packet Pursuit
Desafio
Network AnalysisPacket CaptureWiresharkProtocol Analysis
Stego Hunt
Desafio
SteganographyImage AnalysisWebCTF Basics
Shell Command Scanner
Desafio
Command InjectionWeb SecurityShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity Assessment
Template Injection
Desafio
Server-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPrivilege Escalation
PDF Password Cracker
Desafio
PDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force Attacks
XSS Playground
Desafio
XSSCross-Site ScriptingStored XSSSession HijackingJavaScriptWeb SecurityClient-Side SecurityDOM Manipulation
LFI Log Poison
Desafio
Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalWeb SecurityApache SecuritySystem AdministrationLog Analysis
NoSQL Injection
Desafio
NoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator Exploitation
URL Scanner
Desafio
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2
SQL Injection
Desafio
SQL InjectionDatabase SecurityWeb SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability Assessment
XXE Exposed
Desafio
XXEXML SecurityFile DisclosureExternal EntityWeb SecurityVulnerability Assessment
JWT Bypass
Desafio
JWTWeb SecurityToken AuthenticationCryptography
Auth Bypass
Desafio
SQL InjectionAuthentication BypassWeb SecurityDatabase Security
Ping Pwn
Desafio
Command InjectionWeb ExploitationService DiscoveryNetwork Security
Log Hunter
Desafio
Log AnalysisWeb SecurityIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity Assessment
Path Traversal
Desafio
Path TraversalCGIWeb SecurityFile AccessDirectory TraversalInput Validation
Flask Error
Desafio
FlaskDebug ModePythonWeb SecurityMemory Analysis
Rail Fence
Desafio
CryptographyTransposition CipherRail FencePattern RecognitionPython
Sonic Cipher
Desafio
SteganographyAudio AnalysisLSBForensicsPython
Pixel Puzzler
Desafio
SteganographyImage AnalysisLSBForensicsPython
PDF Trap
Desafio
PDF ForensicsFile AnalysisMetadataHidden DataForensic Tools
Blockchain Secrets
Desafio
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic Analysis
Corporate Breach 2
Desafio
Web SecurityPHPLFIPath ManipulationFile Inclusion
Corporate Breach
Desafio
Web SecurityPHPLFIPassword CrackingAuthentication BypassDirectory Traversal
DNS Exfil
Desafio
Network AnalysisDNSPacket AnalysisData ExfiltrationBase64 Decoding
Snapchat Exposed
Desafio
JenkinsCI/CDDevOpsWeb SecurityPentestAutomation
Red is Dead
Desafio
Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedis
QR Code Quest
Desafio
QR Code AnalysisImage AnalysisData ExtractionSteganographyDigital Forensics
Binary Secrets
Desafio
Binary AnalysisHex EditorsData StructuresReverse EngineeringFile Analysis
Get the Password
Desafio
JavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevTools
Hex Hunt
Desafio
JavaScriptWeb DevelopmentHexadecimalBrowser DevTools
Cronpocalypse
Fácil
SSH
Onboarding Lab: Access and Flags
Muito Fácil
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Hack the Cookie
Muito Fácil
WEBLearning Path
Hack the Login
Muito Fácil
WebAuthenticationClient-Side SecurityLearning Path
Nmap Lab 102
Muito Fácil
TELNETLearning Path
WP Ultimate
Difícil
WP
Compromised 2
Difícil
Advanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassPrivilege Escalation
Traversed
Médio
GIT
Matsudo
Médio
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Compromised 1
Médio
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Anonymous 2
Fácil
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Spoof!
Fácil
IP SPOOFING
Beyond Echo
Médio
PHPRCE
Anonymous
Fácil
FTP
Include me
Fácil
PHPLFI
Secrets in Source
Muito Fácil
HTMLLearning Path
Progresso dos Cursos
Seus caminhos de aprendizado e módulos