Ichiko
✦ Legend ✦
Online
I break systems legally and rank in the top 70 worldwide. Senior hacker from the Philippines with 23 flags and counting.
Atividade
68 dias ativos no ultimo ano
Menos
Mais
Progresso de Rank
✦ Legend ✦
Rank Maximo
Conquistas
Sequência Iniciante
Mestre da Sequência
Rato de Lab
Especialista de Lab
Mestre de Lab
Estudioso
Top 10
Membro Pro
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationJWTWeb SecurityToken AuthenticationCryptographyAlgorithm ConfusionRS256HS256Token ForgeryNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisCommand InjectionShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity AssessmentWireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol ExploitationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementReverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraSession ManagementAuthenticationPHPLFIPassword CrackingAuthentication BypassDirectory TraversalQR Code AnalysisImage AnalysisData ExtractionSteganographyDigital ForensicsDNSData ExfiltrationBase64 DecodingCryptanalysisClassical CryptoPattern RecognitionData EncodingJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsJenkinsCI/CDDevOpsPentestAutomationMD5Rainbow TablesNetwork ReconnaissanceService DiscoveryDatabase ForensicsCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisWeb InspectionHTML AnalysisAPI SecurityWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLSBForensicsPythonAudio AnalysisTransposition CipherRail FenceFlaskDebug ModeMemory AnalysisPath TraversalCGIFile AccessInput ValidationLogic FlawParameter ManipulationWeb ExploitationNetwork SecuritySQL InjectionDatabase SecurityXSSCross-Site ScriptingStored XSSSession HijackingClient-Side SecurityDOM ManipulationClaims ManipulationTime-Based AttacksSignature CrackingLocal File InclusionUser-Agent Log PoisoningRemote Code ExecutionApache SecurityLog AnalysisXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsPost ExploitationNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationPDF SecurityDictionary AttacksDocument SecurityBrute Force AttacksServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsWebCTF BasicsMemory ForensicsTool UsageROT13 EncodingHex EditorsData StructuresMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksClassical CiphersHistorical CryptanalysisWindows RegistryPersistence AnalysisMalware AnalysisHTTP HeadersIP SpoofingInformation GatheringJinja2 ExploitationFile DiscoveryCommand Line ToolsHTTP ProtocolAttack DetectionLDAP InjectionDirectory ServicesEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDocument DatabasesZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksWiFi SecurityWPA CrackingWireless Penetration TestingDeobfuscationCode AnalysisGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTSUID BinariesLinux SecurityBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFrequency AnalysisNetwork ForensicsDNS AnalysisTraffic AnalysisGraphQLSchema IntrospectionInjectionCookie ManipulationFilter BypassApache AuthenticationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity BypassClient-Side ManipulationIDORRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityPolyalphabetic CiphersURL ManipulationInternal Network AccessProtocol BypassEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationRequest SmugglingHash CrackingPassword AnalysisSecurity ToolsType JugglingHash AnalysisWeb EnumerationReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatLinuxCommand LineFile System NavigationHidden FilesgrepfindUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationWPAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationSSHFilter EvasionApache TomcatWAR DeploymentDefault CredentialsSudoLinux CapabilitiesReverse ShellSystem EnumerationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationMass AssignmentPassword ReuseLinux Privilege EscalationMYSQLIRCEJWT ManipulationSSH ExploitationLog InjectionFile EnumerationCron JobsConfiguration AnalysisHeadless CMSInformation DisclosureRevision HistoryToken AbuseSSTISSH Brute ForcePickle DeserializationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperWEBFile PermissionsHost Header InjectionPassword Reset PoisoningGITAccess ControlIP SPOOFINGFTPFile Upload BypassPHP SecurityWeb Shell ExploitationView Source CodeHTMLBroken Access ControlCookie PoisoningSession TamperingNmapNmap CommandsTelnetPort ScanningSecurity Through ObscurityView SourceBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
JWT Bypass
Desafio
JWT Algo Confusion
Desafio
Packet Pursuit
Desafio
Shell Command Scanner
Desafio
WEP Cracker
Desafio
CSRF Bank Transfer
Desafio
Session Switch
Desafio
Corporate Breach
Desafio
QR Code Quest
Desafio
DNS Exfil
Desafio
Crypto Cipher
Desafio
Hex Hunt
Desafio
Snapchat Exposed
Desafio
Get the Password
Desafio
Red is Dead
Desafio
Base64 Detective
Desafio
API Breaker
Desafio
Corporate Breach 2
Desafio
Blockchain Secrets
Desafio
PDF Trap
Desafio
Pixel Puzzler
Desafio
Sonic Cipher
Desafio
Rail Fence
Desafio
Flask Error
Desafio
Path Traversal
Desafio
API Logic Flaw
Desafio
Ping Pwn
Desafio
Auth Bypass
Desafio
XSS Playground
Desafio
JWT Claims Manipulation
Desafio
LFI Log Poison
Desafio
XXE Exposed
Desafio
SQL Injection
Desafio
URL Scanner
Desafio
File Upload Bypass
Desafio
NoSQL Injection
Desafio
PDF Password Cracker
Desafio
Template Injection
Desafio
KeePass Breaker
Desafio
Stego Hunt
Desafio
Memory Forensics
Desafio
Binary Secrets
Desafio
Admin Portal Breach
Desafio
Book Cipher Challenge
Desafio
Registry Hunter
Desafio
IP Spoofing Admin
Desafio
Template Injector
Desafio
Log Hunter
Desafio
LDAP Injector
Desafio
Redis Cache Poisoner
Desafio
MongoDB Injector
Desafio
ZIP Cracker
Desafio
Corporate Backup Deserializer
Desafio
WiFi Password Cracker
Desafio
Hack This Site
Desafio
Git Secrets Hunter
Desafio
SUID Privilege Hunter
Desafio
Registry Hijacker
Desafio
Caesar Shift Decoder
Desafio
DNS Tunneling Detective
Desafio
GraphQL Gateway
Desafio
Button Activator
Desafio
Cookie Forge
Desafio
File Include Bypass
Desafio
Corporate Directory Hunt
Desafio
Header Hijacker
Desafio
IDOR Explorer
Desafio
Race Condition Hunter
Desafio
Prototype Pollution Hunter
Desafio
WebDAV Explorer
Desafio
YAML Bomb
Desafio
Simple Directory Traversal
Desafio
Vigenère Stego Hunt
Desafio
SSRF Validator
Desafio
Email Header Forensics
Desafio
HTTP Smuggling
Desafio
Crack SHA1 Hash
Desafio
Type Juggling Bypass
Desafio
Backup Hunter
Desafio
Git Exposed
Desafio
Regex Bypass to SQLi
Desafio
Office Password Cracker
Desafio
Windows Password Cracker
Desafio
Shadow Cracker
Desafio
Prática de fundamentos Linux
Desafio
Teste de injeção SQL
Desafio
Phantom Text
Desafio
Fine Print
Desafio
Token Trust
Desafio
XOR Reuse
Desafio
Broken Chain
Difícil
WP Ultimate
Difícil
Compromised 2
Difícil
TechNova Infiltration
Médio
RCE Playground
Médio
Compromised 1
Médio
Matsudo
Médio
Internal
Difícil
Anonymous 2
Fácil
Query Quake
Médio
Infiltrator
Fácil
Scheduled Sabotage
Fácil
FortiPy
Difícil
Pickle Jar
Médio
Hack the Box
Difícil
AlVault
Médio
Alpwned
Médio
Hidden CMS Breach
Médio
Host Hijack
Médio
Traversed
Médio
ClearDesk
Médio
Beyond Echo
Médio
Cronpocalypse
Fácil
Spoof!
Fácil
Anonymous
Fácil
FiPloit
Fácil
Include me
Fácil
Hack the Login
Muito Fácil
Pipes e pipelines de dados
Usuários, grupos e permissões
Navegação no sistema de arquivos
Gerenciamento de processos
Buscando o que importa
Leitura e manipulação de arquivos
Sua primeira sessão no terminal
Comandos de rede
A mentalidade hacker
Daily Hack Solved
- Find the SQLi probe
+10 XP
7 hours ago
Daily Hack Solved
- Find the employer
+10 XP
1 day ago
Daily Hack Solved
- Decrypt the ransom note
+10 XP
2 days ago
Daily Hack Solved
- The token names the host
+10 XP
3 days ago
Daily Hack Solved
- Find the tool-exec RCE sink
+10 XP
3 days ago
Daily Hack Solved
- PNG, not TXT
+10 XP
5 days ago
Daily Hack Solved
- Find the hidden email
+10 XP
6 days ago
Daily Hack Solved
- Decode the beacon label
+10 XP
1 week ago
Flag Found
- Ataque SSRF: roube credenciais de metadados na nuvem
+200 XP
1 week ago
Flag Found
- Ataque SSRF: roube credenciais de metadados na nuvem
+200 XP
1 week ago
Ativo por 1 dias
1 week ago
Daily Hack Solved
- Vigenere then base64
+10 XP
1 week ago
Daily Hack Solved
- The GPG blob
+10 XP
2 weeks ago
Daily Hack Solved
- Hex back to text
+10 XP
2 weeks ago
Daily Hack Solved
- Read the shell history
+10 XP
2 weeks ago
Daily Hack Solved
- Geolocate the photo
+10 XP
2 weeks ago
Daily Hack Solved
- Trace the port scan
+10 XP
3 weeks ago
Daily Hack Solved
- Unwrap the C2 beacon
+10 XP
3 weeks ago
Daily Hack Solved
- Forge the tier
+10 XP
3 weeks ago
Daily Hack Solved
- Unshift the letters
+10 XP
3 weeks ago
Chapter Completed
- A mentalidade hacker
+1 XP
4 weeks ago
Lesson Completed
+5 XP
4 weeks ago
Daily Hack Solved
- Mass assign yourself admin
+10 XP
4 weeks ago
Daily Hack Solved
- Pivot three hops to the vault
+10 XP
4 weeks ago
Daily Hack Solved
- Dox the domain owner
+10 XP
4 weeks ago
Ativo por 1 dias
1 month ago
Daily Hack Solved
- Decode the calldata
+10 XP
1 month ago
Daily Hack Solved
- The none algorithm
+10 XP
1 month ago
Daily Hack Solved
- Find the SQL injection sink
+10 XP
1 month ago
Profile Updated
+3 XP
1 month ago
Chapter Completed
- Comandos de rede
+1 XP
1 month ago
Chapter Completed
- Gerenciamento de processos
+1 XP
1 month ago
Chapter Completed
- Pipes e pipelines de dados
+1 XP
1 month ago
Chapter Completed
- Usuários, grupos e permissões
+1 XP
1 month ago
Chapter Completed
- Buscando o que importa
+1 XP
1 month ago
Chapter Completed
- Leitura e manipulação de arquivos
+1 XP
1 month ago
Chapter Completed
- Navegação no sistema de arquivos
+1 XP
1 month ago
Chapter Completed
- Sua primeira sessão no terminal
+1 XP
1 month ago
Flag Found
- JWT Bypass
+50 XP
1 month ago
Flag Found
- JWT Algo Confusion
+50 XP
1 month ago
Flag Found
- Packet Pursuit
+50 XP
1 month ago
Flag Found
- Shell Command Scanner
+50 XP
1 month ago
Flag Found
- WEP Cracker
+50 XP
1 month ago
Daily Hack Solved
- ZIP in disguise
+10 XP
1 month ago
Flag Found
- CSRF Bank Transfer
+50 XP
1 month ago
Daily Hack Solved
- The comment leak
+10 XP
1 month ago
Flag Found
- Engenharia Reversa: Crackme de Chave de Licença
+200 XP
1 month ago
Ativo por 2 dias
1 month ago
Daily Hack Solved
- Leak the app admin token
+10 XP
1 month ago