Malekith Online
✦ Legend ✦
Ranking
#1
Melhor: #1
Total de Pontos
1710
Total Ganho
Labs Concluídos
118
120 User • 19 Root
Módulos
91
Validados
Primeiros Sangues
28
Primeiro a Concluir
Melhor Sequência
69
Dias
Habilidades Adquiridas
Habilidades técnicas praticadas através dos labs concluídos
CSSMedia QueriesWeb ForensicsSource AnalysisDevToolsUnicodeSteganographyPythonText AnalysisLinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration AnalysisCommand LineFile System NavigationHidden FilesgrepfindDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBWeb EnumerationAuthenticationRCEHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning PathPassword CrackingLinux SecurityJohn the RipperhashcatCryptographyCVE ExploitationWindows SecurityNTLMHashcatHash AnalysisOffice SecurityHash ExtractionSQL InjectionRegex BypassInput ValidationWeb Application SecuritySQLiteUNION-Based SQLiGitVersion ControlReconnaissanceFile DiscoveryInformation GatheringPHPType JugglingAuthentication BypassHash CrackingPassword AnalysisSecurity ToolsDatabase SecurityPenetration TestingJavaScriptDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSSTIFlask SecuritySSH Brute ForceDatabase EnumerationClassical CiphersImage AnalysisPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRace ConditionsTiming AttacksConcurrent ExploitationIDORParameter ManipulationAuthorization BypassHTTP HeadersSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationJWTCookie ManipulationDOM ManipulationGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationFrequency AnalysisPattern RecognitionDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationSUID BinariesNoSQL InjectionMongoDBDocument DatabasesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationLDAP InjectionDirectory ServicesEnterprise SecurityFilter EvasionJWT ManipulationSSH ExploitationLog InjectionServer-Side Template InjectionJinja2 ExploitationIP SpoofingAccess Control BypassWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationDigital ForensicsWindows RegistryPersistence AnalysisIncident ResponseMalware AnalysisWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksZIP Password CrackingfcrackzipBrute ForceArchive SecurityKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsSystem AdministrationHTTP Parameter ManipulationWPUser-Agent Log PoisoningApache SecurityLog AnalysisAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationVisibility ControlsSecurity TestingOperator ExploitationWeb HackingLogic FlawsToken ManipulationBase64 EncodingMemory ForensicsBinary AnalysisTool UsageData RecoveryROT13 EncodingJenkinsCI/CDDevOpsPentestAutomationPath TraversalCGILogic FlawAudio AnalysisLSBForensicsBypass TechniquesWeb ShellsSocial EngineeringPost ExploitationLinux CapabilitiesReverse ShellSystem EnumerationNetwork ReconnaissanceServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2MYSQLILinux Privilege EscalationFile PermissionsCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementXSSCross-Site ScriptingStored XSSSession HijackingClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentSudoApache TomcatWAR DeploymentDefault CredentialsXXEXML SecurityFile DisclosureExternal EntityAlgorithm ConfusionRS256HS256Token ForgeryToken AuthenticationWeb ExploitationService DiscoveryCommand Line ToolsAttack DetectionFlaskDebug ModeMemory AnalysisTransposition CipherRail FencePDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionNetwork AnalysisDNSCryptanalysisClassical CryptoData EncodingSession ManagementDatabase ForensicsCLI UsageBase64Hex EncodingRedisQR Code AnalysisWEBWeb InspectionHTML AnalysisHex EditorsData StructuresReverse EngineeringMD5Rainbow TablesWeb DevelopmentPacket CaptureWiresharkProtocol AnalysisWebCTF BasicsHexadecimalFile Upload BypassPHP SecurityWeb Shell ExploitationGITFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGFTPTELNETNetworkingWeb Services
Módulos Concluídos
Módulos educacionais validados com sucesso
Nmap Mastery: Dominate Network Scanning
4 módulosInstalling Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
HTTP Header Manipulation: IP Spoofing
3 módulosRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Quebra de Senhas
10 módulosRainbow tables
Quebra de wireless
Quebra de PDF
Quebra de hashes Linux
Quebra de Documentos Office
Quebra de ZIP
Ataques de força bruta
Fundamentos de senhas
Ataques de dicionário
Quebra de hashes Windows
Escalação de Privilégios Linux
10 módulosBásicos de privesc Linux
Hijacking de PATH
Enumeração manual
Hardening Linux
Abuso de cron jobs
Escapes de containers
Exploração SUID
Enumeração automatizada
Abuso de sudo
Exploits de kernel
Pentest de Rede
10 módulosReconhecimento ativo
Pós-exploração
Pivoteamento
Exploração de serviços
Relatórios de pentest
Ataques de senha
Ataques MITM
Varredura de vulnerabilidades
Fundamentos de rede
Enumeração de serviços
Cheat Sheets de Segurança
10 módulosCheat Sheet do Hydra
Cheat Sheet do Nikto
Cheat Sheet do John the Ripper
Cheat Sheet do SQLMap
Cheat Sheet do Wireshark
Cheat Sheet do Burp Suite
Cheat Sheet do Gobuster
Cheat Sheet do Nmap
Cheat Sheet do Hashcat
Cheat Sheet do Metasploit
HDNA Ethical Hacking Course
5 módulos1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Ataques Web
12 módulosAtaques CSRF
Injeção XXE
SSRF
Inclusão de Arquivos
Intro Segurança Web
SSTI
Desserialização
Ataques File Upload
Ataques XSS
Bypass de Auth
Injeção SQL
Injeção de Comandos
Hacking de API
10 módulosBypass de rate limiting
Ataques GraphQL
Injeção em API
Recon de API
Fuzzing de API
Básicos de segurança API
BOLA e IDOR
OWASP API Top 10
Ataques de auth API
Mass assignment
Bug Bounty
10 módulosGanhos rápidos
Configuração de caça
Automação
Básicos de bug bounty
Metodologia de caça
Evitando duplicatas
Carreira bug bounty
Fundamentos de recon
Escrita de relatórios
Seleção de programas
Ataques JWT
4 módulosFundamentos JWT
Adulteração JWT
Quebra de JWT
Confusão de Algoritmo
Remote Code Execution (RCE)
3 módulosShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Labs & Desafios Concluídos
Desafios práticos de cibersegurança concluídos com sucesso
Fine Print
Desafio
CSSMedia QueriesWeb ForensicsSource AnalysisDevTools
Phantom Text
Desafio
UnicodeSteganographyWeb ForensicsPythonText Analysis
Scheduled Sabotage
Fácil
LinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration Analysis
Linux Fundamentals Practice
Desafio
LinuxCommand LineFile System NavigationHidden Filesgrepfind
Hack the Box
Difícil
Directory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDB
Hidden CMS Breach
Médio
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
Secrets in Source 2
Muito Fácil
Web SecurityHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning Path
Shadow Cracker
Desafio
Password CrackingLinux SecurityJohn the RipperhashcatCryptography
TechNova Infiltration
Médio
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Windows Password Cracker
Desafio
Password CrackingWindows SecurityNTLMHashcatJohn the RipperHash Analysis
Office Password Cracker
Desafio
Password CrackingOffice SecurityHash ExtractionJohn the RipperHashcat
Regex Bypass to SQLi
Desafio
SQL InjectionRegex BypassInput ValidationWeb Application SecuritySQLiteUNION-Based SQLi
Git Exposed
Desafio
GitVersion ControlSource Code AnalysisReconnaissanceWeb Security
Backup Hunter
Desafio
Web EnumerationFile DiscoveryReconnaissanceInformation Gathering
Type Juggling Bypass
Desafio
Web SecurityPHPType JugglingAuthentication BypassHash Analysis
Crack SHA1 Hash
Desafio
CryptographyHash CrackingPassword AnalysisSecurity Tools
SQL Injection Test
Desafio
SQL InjectionWeb SecurityDatabase SecurityAuthentication BypassInput ValidationPenetration Testing
Hack This Site
Desafio
JavaScriptDeobfuscationClient-Side SecurityBrowser DevToolsCode AnalysisAuthentication Bypass
HTTP Smuggling
Desafio
HTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisWeb SecurityPacket Analysis
Email Header Forensics
Desafio
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
SSRF Validator
Desafio
SSRFWeb SecurityURL ManipulationInternal Network AccessProtocol Bypass
FortiPy
Difícil
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
Vigenere Stego Hunt
Desafio
CryptographySteganographyClassical CiphersImage AnalysisPolyalphabetic Ciphers
Simple Directory Traversal
Desafio
Directory TraversalPath InjectionFile System SecurityWeb SecurityInput ValidationPath ManipulationFile Access
YAML Bomb
Desafio
YAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing Security
WebDAV Explorer
Desafio
WebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System Enumeration
Prototype Pollution Hunter
Desafio
Prototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web Vulnerabilities
Race Condition Hunter
Desafio
Race ConditionsTiming AttacksConcurrent ExploitationWeb Application Security
IDOR Explorer
Desafio
IDORParameter ManipulationWeb Application SecurityAuthorization Bypass
Header Hijacker
Desafio
HTTP HeadersSecurity BypassWeb Application SecurityClient-Side Manipulation
Corporate Directory Hunt
Desafio
Directory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity Assessment
File Include Bypass
Desafio
Local File InclusionFilter BypassApache AuthenticationPassword Cracking
Cookie Forge
Desafio
JWTCookie ManipulationAuthentication BypassPrivilege Escalation
Button Activator
Desafio
JavaScriptBrowser DevToolsDOM ManipulationClient-Side Security
GraphQL Gateway
Desafio
GraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjection
DNS Tunneling Detective
Desafio
Network ForensicsDNS AnalysisData ExfiltrationTraffic Analysis
Caesar Shift Decoder
Desafio
CryptographyClassical CiphersFrequency AnalysisPattern Recognition
Registry Hijacker
Desafio
Docker Registry APIAuthentication BypassContainer SecurityAPI ManipulationRegistry Exploitation
SUID Privilege Hunter
Desafio
SUID BinariesPrivilege EscalationCommand InjectionLinux SecurityBinary Exploitation
MongoDB Injector
Desafio
NoSQL InjectionMongoDBAuthentication BypassDocument DatabasesWeb Security
Redis Cache Poisoner
Desafio
CRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationWeb Security
LDAP Injector
Desafio
LDAP InjectionAuthentication BypassDirectory ServicesEnterprise SecurityWeb Security
RCE Playground
Médio
Command InjectionInput Validation BypassRemote Code ExecutionFilter EvasionWeb Security
Infiltrator
Fácil
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
Template Injector
Desafio
Server-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb Security
IP Spoofing Admin
Desafio
Web SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation Gathering
WEP Cracker
Desafio
Wireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol Exploitation
Registry Hunter
Desafio
Digital ForensicsWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware Analysis
WiFi Password Cracker
Desafio
WiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityPacket Analysis
Book Cipher Challenge
Desafio
CryptographyClassical CiphersPattern RecognitionHistorical Cryptanalysis
Admin Portal Breach
Desafio
Client-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksAuthentication Bypass
Git Secrets Hunter
Desafio
Git ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINT
Corporate Backup Deserializer
Desafio
Python PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise Security
ZIP Cracker
Desafio
ZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive Security
KeePass Breaker
Desafio
KeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool Limitations
Template Injection
Desafio
Server-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPrivilege Escalation
PDF Password Cracker
Desafio
PDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force Attacks
Shell Command Scanner
Desafio
Command InjectionWeb SecurityShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity Assessment
WP Ultimate
Difícil
WP
LFI Log Poison
Desafio
Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalWeb SecurityApache SecuritySystem AdministrationLog Analysis
Compromised 2
Difícil
Advanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassPrivilege Escalation
Broken Chain
Difícil
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
NoSQL Injection
Desafio
NoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator Exploitation
API Breaker
Desafio
API SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization Bypass
Memory Forensics
Desafio
Memory ForensicsBinary AnalysisDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 Encoding
Snapchat Exposed
Desafio
JenkinsCI/CDDevOpsWeb SecurityPentestAutomation
Path Traversal
Desafio
Path TraversalCGIWeb SecurityFile AccessDirectory TraversalInput Validation
API Logic Flaw
Desafio
API SecurityLogic FlawAuthentication BypassParameter ManipulationPHPWeb Security
Sonic Cipher
Desafio
SteganographyAudio AnalysisLSBForensicsPython
File Upload Bypass
Desafio
File UploadWeb SecurityBypass TechniquesPHPWeb ShellsInput ValidationSocial EngineeringPost Exploitation
Internal
Difícil
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
URL Scanner
Desafio
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2
Query Quake
Médio
MYSQLIRCE
Alpwned
Médio
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
CSRF Bank Transfer
Desafio
CSRFCross-Site Request ForgerySession SecurityWeb SecuritySocial EngineeringForm SecurityHTTP SecurityState Management
XSS Playground
Desafio
XSSCross-Site ScriptingStored XSSSession HijackingJavaScriptWeb SecurityClient-Side SecurityDOM Manipulation
JWT Claims Manipulation
Desafio
JWTClaims ManipulationPrivilege EscalationAuthentication BypassTime-Based AttacksSignature Cracking
SQL Injection
Desafio
SQL InjectionDatabase SecurityWeb SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability Assessment
Matsudo
Médio
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Compromised 1
Médio
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
XXE Exposed
Desafio
XXEXML SecurityFile DisclosureExternal EntityWeb SecurityVulnerability Assessment
JWT Algo Confusion
Desafio
JWTAlgorithm ConfusionRS256HS256Token ForgeryWeb Security
JWT Bypass
Desafio
JWTWeb SecurityToken AuthenticationCryptography
Beyond Echo
Médio
PHPRCE
Auth Bypass
Desafio
SQL InjectionAuthentication BypassWeb SecurityDatabase Security
Ping Pwn
Desafio
Command InjectionWeb ExploitationService DiscoveryNetwork Security
Log Hunter
Desafio
Log AnalysisWeb SecurityIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity Assessment
Flask Error
Desafio
FlaskDebug ModePythonWeb SecurityMemory Analysis
Rail Fence
Desafio
CryptographyTransposition CipherRail FencePattern RecognitionPython
Pixel Puzzler
Desafio
SteganographyImage AnalysisLSBForensicsPython
PDF Trap
Desafio
PDF ForensicsFile AnalysisMetadataHidden DataForensic Tools
Blockchain Secrets
Desafio
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic Analysis
Corporate Breach 2
Desafio
Web SecurityPHPLFIPath ManipulationFile Inclusion
Corporate Breach
Desafio
Web SecurityPHPLFIPassword CrackingAuthentication BypassDirectory Traversal
DNS Exfil
Desafio
Network AnalysisDNSPacket AnalysisData ExfiltrationBase64 Decoding
Crypto Cipher
Desafio
CryptanalysisClassical CryptoPattern RecognitionData Encoding
Session Switch
Desafio
Web SecuritySession ManagementAuthenticationPrivilege EscalationPHP
Red is Dead
Desafio
Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedis
QR Code Quest
Desafio
QR Code AnalysisImage AnalysisData ExtractionSteganographyDigital Forensics
AlVault
Médio
WEB
Base64 Detective
Desafio
Base64Web InspectionBrowser DevToolsData EncodingHTML Analysis
Binary Secrets
Desafio
Binary AnalysisHex EditorsData StructuresReverse EngineeringFile Analysis
Get the Password
Desafio
JavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevTools
Packet Pursuit
Desafio
Network AnalysisPacket CaptureWiresharkProtocol Analysis
Stego Hunt
Desafio
SteganographyImage AnalysisWebCTF Basics
Hex Hunt
Desafio
JavaScriptWeb DevelopmentHexadecimalBrowser DevTools
FiPloit
Fácil
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Traversed
Médio
GIT
Cronpocalypse
Fácil
SSH
Anonymous 2
Fácil
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Spoof!
Fácil
IP SPOOFING
Anonymous
Fácil
FTP
Include me
Fácil
PHPLFI
Nmap Lab 102
Muito Fácil
TELNETLearning Path
Hack the Cookie
Muito Fácil
WEBLearning Path
Onboarding Lab: Access and Flags
Muito Fácil
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Secrets in Source
Muito Fácil
HTMLLearning Path
Hack the Login
Muito Fácil
WebAuthenticationClient-Side SecurityLearning Path
Progresso dos Cursos
Seus caminhos de aprendizado e módulos
Ataques Web
100%
Ataques JWT
100%
Pentest de Rede
100%
Hacking de API
100%
Bug Bounty
100%
Quebra de Senhas
100%