kevine
✦ Legend ✦
Online
Ranked #2 worldwide with 151 flags captured. I break things professionally, then explain how to fix them.
Atividade
31 dias ativos no ultimo ano
Menos
Mais
Progresso de Rank
✦ Legend ✦
Rank Maximo
Conquistas
Primeiro Sangue
Sequência Iniciante
Mestre da Sequência
Rato de Lab
Especialista de Lab
Mestre de Lab
Estudioso
Top 10
Membro Pro
Server-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb SecurityLDAP InjectionAuthentication BypassDirectory ServicesEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationNoSQL InjectionMongoDBDocument DatabasesSUID BinariesPrivilege EscalationCommand InjectionLinux SecurityBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationGraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjectionJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityJWTCookie ManipulationLocal File InclusionFilter BypassApache AuthenticationPassword CrackingDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentHTTP HeadersSecurity BypassWeb Application SecurityClient-Side ManipulationCryptographyClassical CiphersFrequency AnalysisPattern RecognitionNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisIDORParameter ManipulationVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationUser-Agent Log PoisoningDirectory TraversalApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationPDF SecurityDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksJinja2Web Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTMD5 CrackingSource Code AnalysisPassword AttacksHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingNetwork SecurityPacket AnalysisWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationIP SpoofingInformation GatheringFlaskDebug ModePythonMemory AnalysisLogic FlawPHPWeb ExploitationService DiscoveryToken AuthenticationAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationQR Code AnalysisImage AnalysisData ExtractionSteganographyWeb HackingLogic FlawsToken ManipulationBase64 EncodingCryptanalysisClassical CryptoData EncodingMemory ForensicsBinary AnalysisTool UsageData RecoveryROT13 EncodingNetwork ReconnaissanceDatabase ForensicsCLI UsageBase64Hex EncodingRedisJenkinsCI/CDDevOpsPentestAutomationNetwork AnalysisDNSLFIPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLSBForensicsAudio AnalysisTransposition CipherRail FenceWeb InspectionHTML AnalysisWeb DevelopmentHexadecimalWebCTF BasicsPacket CaptureWiresharkProtocol AnalysisMD5Rainbow TablesHex EditorsData StructuresReverse EngineeringWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityFile AccessURL ManipulationInternal Network AccessProtocol BypassRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesPolyalphabetic CiphersEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationLinuxCommand LineFile System NavigationHidden FilesgrepfindHTTP ProtocolRequest SmugglingHash CrackingPassword AnalysisSecurity ToolsType JugglingHash AnalysisWeb EnumerationFile DiscoveryReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackWPCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationLinux CapabilitiesReverse ShellSystem EnumerationFilter EvasionFile Upload BypassPHP SecurityWeb Shell ExploitationJWT ManipulationSSH ExploitationLog InjectionSSHFile EnumerationCron JobsConfiguration AnalysisHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbuseHost Header InjectionPassword Reset PoisoningMass AssignmentPassword ReuseLinux Privilege EscalationMYSQLIRCESSTISSH Brute ForceDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraFile PermissionsApache TomcatWAR DeploymentDefault CredentialsSudoAuthenticationDeobfuscationCode AnalysisGITWEBPickle DeserializationPath TraversalAccess ControlSecurity Through ObscurityView SourceBroken Access ControlHTMLCommand Line ToolsAttack DetectionCGISession ManagementIP SPOOFINGFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPView Source CodeCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsNmapNmap CommandsTelnetPort ScanningBroken AuthenticationDeveloper ToolsLearning PathCookie PoisoningSession Tampering
Template Injector
Desafio
LDAP Injector
Desafio
Redis Cache Poisoner
Desafio
MongoDB Injector
Desafio
SUID Privilege Hunter
Desafio
Registry Hijacker
Desafio
GraphQL Gateway
Desafio
Button Activator
Desafio
Cookie Forge
Desafio
File Include Bypass
Desafio
Corporate Directory Hunt
Desafio
Header Hijacker
Desafio
Caesar Shift Decoder
Desafio
DNS Tunneling Detective
Desafio
IDOR Explorer
Desafio
NoSQL Injection
Desafio
LFI Log Poison
Desafio
Shell Command Scanner
Desafio
PDF Password Cracker
Desafio
Template Injection
Desafio
KeePass Breaker
Desafio
ZIP Cracker
Desafio
Corporate Backup Deserializer
Desafio
Git Secrets Hunter
Desafio
Admin Portal Breach
Desafio
Book Cipher Challenge
Desafio
WiFi Password Cracker
Desafio
Registry Hunter
Desafio
WEP Cracker
Desafio
IP Spoofing Admin
Desafio
Flask Error
Desafio
API Logic Flaw
Desafio
Ping Pwn
Desafio
JWT Bypass
Desafio
JWT Algo Confusion
Desafio
XXE Exposed
Desafio
SQL Injection
Desafio
JWT Claims Manipulation
Desafio
XSS Playground
Desafio
URL Scanner
Desafio
File Upload Bypass
Desafio
QR Code Quest
Desafio
API Breaker
Desafio
Crypto Cipher
Desafio
Memory Forensics
Desafio
Red is Dead
Desafio
Snapchat Exposed
Desafio
DNS Exfil
Desafio
Corporate Breach
Desafio
Corporate Breach 2
Desafio
Blockchain Secrets
Desafio
PDF Trap
Desafio
Pixel Puzzler
Desafio
Sonic Cipher
Desafio
Rail Fence
Desafio
Base64 Detective
Desafio
Hex Hunt
Desafio
Stego Hunt
Desafio
Packet Pursuit
Desafio
Get the Password
Desafio
Binary Secrets
Desafio
WebDAV Explorer
Desafio
Teste de injeção SQL
Desafio
YAML Bomb
Desafio
Simple Directory Traversal
Desafio
SSRF Validator
Desafio
Race Condition Hunter
Desafio
Prototype Pollution Hunter
Desafio
Vigenère Stego Hunt
Desafio
Email Header Forensics
Desafio
Prática de fundamentos Linux
Desafio
HTTP Smuggling
Desafio
Crack SHA1 Hash
Desafio
Type Juggling Bypass
Desafio
Backup Hunter
Desafio
Git Exposed
Desafio
Regex Bypass to SQLi
Desafio
Office Password Cracker
Desafio
Windows Password Cracker
Desafio
Shadow Cracker
Desafio
Phantom Text
Desafio
Fine Print
Desafio
Token Trust
Desafio
XOR Reuse
Desafio
WP Ultimate
Difícil
CSRF Bank Transfer
Desafio
Compromised 2
Difícil
Broken Chain
Difícil
Internal
Difícil
RCE Playground
Médio
FiPloit
Fácil
Infiltrator
Fácil
Scheduled Sabotage
Fácil
Host Hijack
Médio
Query Quake
Médio
FortiPy
Difícil
Hack the Box
Difícil
TechNova Infiltration
Médio
Alpwned
Médio
Compromised 1
Médio
Hidden CMS Breach
Médio
Hack This Site
Desafio
Traversed
Médio
AlVault
Médio
Pickle Jar
Médio
Auth Bypass
Desafio
ClearDesk
Médio
Log Hunter
Desafio
Path Traversal
Desafio
Beyond Echo
Médio
Session Switch
Desafio
Matsudo
Médio
Cronpocalypse
Fácil
Spoof!
Fácil
Include me
Fácil
Anonymous 2
Fácil
Anonymous
Fácil
Hack the Login
Muito Fácil
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Fundamentos de privesc Linux
Hijacking de PATH
Enumeração manual
Hardening Linux
Abuso de cron jobs
Escapes de containers
Exploração SUID
Enumeração automatizada
Abuso de sudo
Exploits de kernel
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Intro Segurança Web
Fundamentos do SOC
Análise de logs por consultas
Fontes de logs e SIEM
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Daily Hack Solved
- Same handle everywhere
+10 XP
20 hours ago
Daily Hack Solved
- CloudTrail anomaly
+10 XP
1 day ago
Daily Hack Solved
- Vigenere then base64
+10 XP
2 days ago
Daily Hack Solved
- Read the JWT claim
+10 XP
4 days ago
Daily Hack Solved
- Find the hardcoded API key
+10 XP
5 days ago
Daily Hack Solved
- The GPG blob
+10 XP
5 days ago
Daily Hack Solved
- Hex back to text
+10 XP
6 days ago
Daily Hack Solved
- The hidden link
+10 XP
1 week ago
Daily Hack Solved
- Flip the debug flag
+10 XP
1 week ago
Daily Hack Solved
- Read the shell history
+10 XP
1 week ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 week ago
Daily Hack Solved
- Trace the port scan
+10 XP
1 week ago
Chapter Completed
- Análise de logs por consultas
+1 XP
1 week ago
Chapter Completed
- Fontes de logs e SIEM
+1 XP
1 week ago
Flag Found
- Template Injector
+50 XP
1 week ago
Flag Found
- LDAP Injector
+50 XP
1 week ago
Flag Found
- Redis Cache Poisoner
+50 XP
1 week ago
Flag Found
- MongoDB Injector
+50 XP
1 week ago
Flag Found
- SUID Privilege Hunter
+50 XP
1 week ago
Flag Found
- Registry Hijacker
+50 XP
1 week ago
Flag Found
- GraphQL Gateway
+50 XP
1 week ago
Flag Found
- Button Activator
+50 XP
1 week ago
Flag Found
- Cookie Forge
+50 XP
1 week ago
Flag Found
- File Include Bypass
+50 XP
1 week ago
Flag Found
- Corporate Directory Hunt
+50 XP
1 week ago
Flag Found
- Header Hijacker
+50 XP
1 week ago
Flag Found
- Caesar Shift Decoder
+50 XP
1 week ago
Flag Found
- DNS Tunneling Detective
+50 XP
1 week ago
Flag Found
- IDOR Explorer
+50 XP
1 week ago
Flag Found
- NoSQL Injection
+50 XP
1 week ago
Flag Found
- LFI Log Poison
+50 XP
1 week ago
Flag Found
- Shell Command Scanner
+50 XP
1 week ago
Flag Found
- PDF Password Cracker
+50 XP
1 week ago
Flag Found
- Template Injection
+50 XP
1 week ago
Flag Found
- KeePass Breaker
+50 XP
1 week ago
Flag Found
- ZIP Cracker
+50 XP
1 week ago
Flag Found
- Corporate Backup Deserializer
+50 XP
1 week ago
Flag Found
- Git Secrets Hunter
+50 XP
1 week ago
Flag Found
- Admin Portal Breach
+50 XP
1 week ago
Flag Found
- Book Cipher Challenge
+50 XP
1 week ago
Flag Found
- WiFi Password Cracker
+50 XP
1 week ago
Flag Found
- Registry Hunter
+50 XP
1 week ago
Flag Found
- WEP Cracker
+50 XP
1 week ago
Flag Found
- IP Spoofing Admin
+50 XP
1 week ago
Flag Found
- Flask Error
+50 XP
1 week ago
Flag Found
- API Logic Flaw
+50 XP
1 week ago
Flag Found
- Ping Pwn
+50 XP
1 week ago
Flag Found
- JWT Bypass
+50 XP
1 week ago
Flag Found
- JWT Algo Confusion
+50 XP
1 week ago
Flag Found
- XXE Exposed
+50 XP
1 week ago