skalvin
✦ Legend ✦
¯\_(ツ)_/¯ Mess with the best, die like the rest
Atividade
209 dias ativos no ultimo ano
Menos
Mais
Progresso de Rank
✦ Legend ✦
Rank Maximo
Conquistas
Primeiro Sangue
Sequência Iniciante
Mestre da Sequência
Rato de Lab
Especialista de Lab
Mestre de Lab
Estudioso
Top 10
Web Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingHost Header InjectionPassword Reset PoisoningPrivilege EscalationHTTP HeadersWeb ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePythonPickle DeserializationRCELinuxIDORAPI SecurityPath TraversalAccess ControlOAuth 2.0JWTWeb ReconConfiguration ExploitsUnicodeSteganographyWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsCommand LineFile System NavigationHidden FilesgrepfindAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassMemory ForensicsDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 EncodingWeb SecuritySession ManagementAuthenticationPHPFile UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationAudio AnalysisLSBForensicsKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsAlgorithm ConfusionRS256HS256Token ForgeryLogic FlawParameter ManipulationMD5Rainbow TablesDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBWeb EnumerationWPClient-Side SecuritySecurity Through ObscurityView SourceBroken Access ControlHTMLIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationPassword CrackingLinux SecurityJohn the RipperhashcatCryptographySSHWindows SecurityNTLMHashcatHash AnalysisOffice SecurityHash ExtractionSQL InjectionRegex BypassSQLiteUNION-Based SQLiGitVersion ControlSource Code AnalysisReconnaissanceFile DiscoveryInformation GatheringType JugglingPassword AnalysisSecurity ToolsDatabase SecurityDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSSTIFlask SecuritySSH Brute ForceDatabase EnumerationClassical CiphersPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRace ConditionsTiming AttacksConcurrent ExploitationSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationCookie ManipulationDOM ManipulationFilter EvasionGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationFrequency AnalysisDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationSUID BinariesNoSQL InjectionMongoDBDocument DatabasesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationLDAP InjectionDirectory ServicesEnterprise SecurityJWT ManipulationSSH ExploitationLog InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksIP SpoofingAccess Control BypassJinja2 ExploitationWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationWindows RegistryPersistence AnalysisMalware AnalysisHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisVisibility ControlsSecurity TestingOperator ExploitationReverse ShellSystem EnumerationNetwork ReconnaissanceServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File PermissionsCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementXSSCross-Site ScriptingStored XSSSession HijackingCGIClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityToken AuthenticationService DiscoveryCommand Line ToolsAttack DetectionFlaskDebug ModeMemory AnalysisTransposition CipherRail FencePDF ForensicsMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionDNSCryptanalysisClassical CryptoData EncodingJenkinsCI/CDDevOpsPentestAutomationDatabase ForensicsCLI UsageBase64Hex EncodingRedisQR Code AnalysisMYSQLIWeb InspectionHTML AnalysisWEBFile Upload BypassPHP SecurityWeb Shell ExploitationApache TomcatWAR DeploymentDefault CredentialsSudoGITView Source CodeNmapNmap CommandsTelnetPort ScanningFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsIP SPOOFINGCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning Path
Host Hijack
Médio
Pickle Jar
Médio
ClearDesk
Médio
Token Trust
Desafio
Phantom Text
Desafio
Fine Print
Desafio
Prática de fundamentos Linux
Desafio
Compromised 2
Difícil
Hex Hunt
Desafio
Stego Hunt
Desafio
Packet Pursuit
Desafio
Binary Secrets
Desafio
API Breaker
Desafio
Memory Forensics
Desafio
Session Switch
Desafio
File Upload Bypass
Desafio
Sonic Cipher
Desafio
KeePass Breaker
Desafio
JWT Algo Confusion
Desafio
API Logic Flaw
Desafio
Get the Password
Desafio
Hack the Box
Difícil
Hidden CMS Breach
Médio
WP Ultimate
Difícil
Broken Chain
Difícil
Shadow Cracker
Desafio
TechNova Infiltration
Médio
Windows Password Cracker
Desafio
Office Password Cracker
Desafio
Regex Bypass to SQLi
Desafio
Git Exposed
Desafio
Backup Hunter
Desafio
Type Juggling Bypass
Desafio
Crack SHA1 Hash
Desafio
Teste de injeção SQL
Desafio
Hack This Site
Desafio
HTTP Smuggling
Desafio
Email Header Forensics
Desafio
SSRF Validator
Desafio
FortiPy
Difícil
Vigenère Stego Hunt
Desafio
Simple Directory Traversal
Desafio
YAML Bomb
Desafio
WebDAV Explorer
Desafio
Prototype Pollution Hunter
Desafio
Race Condition Hunter
Desafio
IDOR Explorer
Desafio
Header Hijacker
Desafio
Corporate Directory Hunt
Desafio
File Include Bypass
Desafio
Cookie Forge
Desafio
Button Activator
Desafio
RCE Playground
Médio
GraphQL Gateway
Desafio
DNS Tunneling Detective
Desafio
Caesar Shift Decoder
Desafio
Registry Hijacker
Desafio
SUID Privilege Hunter
Desafio
MongoDB Injector
Desafio
Redis Cache Poisoner
Desafio
LDAP Injector
Desafio
Infiltrator
Fácil
Corporate Backup Deserializer
Desafio
IP Spoofing Admin
Desafio
Template Injector
Desafio
WiFi Password Cracker
Desafio
WEP Cracker
Desafio
Registry Hunter
Desafio
Book Cipher Challenge
Desafio
Admin Portal Breach
Desafio
Git Secrets Hunter
Desafio
ZIP Cracker
Desafio
Template Injection
Desafio
PDF Password Cracker
Desafio
Shell Command Scanner
Desafio
LFI Log Poison
Desafio
NoSQL Injection
Desafio
Internal
Difícil
URL Scanner
Desafio
Alpwned
Médio
CSRF Bank Transfer
Desafio
XSS Playground
Desafio
Path Traversal
Desafio
JWT Claims Manipulation
Desafio
SQL Injection
Desafio
XXE Exposed
Desafio
JWT Bypass
Desafio
Auth Bypass
Desafio
Ping Pwn
Desafio
Log Hunter
Desafio
Flask Error
Desafio
Rail Fence
Desafio
Pixel Puzzler
Desafio
PDF Trap
Desafio
Blockchain Secrets
Desafio
Corporate Breach 2
Desafio
Corporate Breach
Desafio
DNS Exfil
Desafio
Crypto Cipher
Desafio
Snapchat Exposed
Desafio
Red is Dead
Desafio
QR Code Quest
Desafio
Query Quake
Médio
Base64 Detective
Desafio
AlVault
Médio
FiPloit
Fácil
Compromised 1
Médio
Traversed
Médio
Matsudo
Médio
Beyond Echo
Médio
Cronpocalypse
Fácil
Include me
Fácil
Anonymous 2
Fácil
Anonymous
Fácil
Spoof!
Fácil
Hack the Login
Muito Fácil
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Reconhecimento ativo
Pós-exploração
Pivoteamento
Exploração de serviços
Relatórios de pentest
Ataques de senha
Ataques MITM
Varredura de vulnerabilidades
Fundamentos de rede
Enumeração de serviços
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Codificação não é criptografia
A mentalidade hacker
Rainbow tables
Quebra de wireless
Quebra de PDF
Quebra de hashes Linux
Quebra de Documentos Office
Quebra de ZIP
Ataques de força bruta
Fundamentos de senhas
Ataques de dicionário
Quebra de hashes Windows
Cheat Sheet do Hydra
Cheat Sheet do Nikto
Cheat Sheet do John the Ripper
Cheat Sheet do SQLMap
Cheat Sheet do Wireshark
Cheat Sheet do Burp Suite
Cheat Sheet do Gobuster
Cheat Sheet do Nmap
Cheat Sheet do Hashcat
Cheat Sheet do Metasploit
Ataques Web
12
Ataques CSRF
Injeção XXE
SSRF
Inclusão de Arquivos
Intro Segurança Web
SSTI
Desserialização
Ataques File Upload
Ataques XSS
Bypass de Auth
Injeção SQL
Injeção de Comandos
Bug Bounty
10
Ganhos rápidos
Configuração de caça
Automação
Básicos de bug bounty
Metodologia de caça
Evitando duplicatas
Carreira bug bounty
Fundamentos de recon
Escrita de relatórios
Seleção de programas
Fundamentos JWT
Adulteração JWT
Quebra de JWT
Confusão de Algoritmo
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Personificação de tokens
Básicos de privesc Windows
WinPEAS e PowerUp
Exploração de serviços
Enumeração Windows
Ataques de registro
CVE
1
CVE-2024-34899
Daily Hack Solved
- Crack the reset token
+10 XP
1 day ago
Lesson Completed
+10 XP
2 days ago
Daily Hack Solved
- Tamper the invoice ID
+10 XP
2 days ago
Ativo por 1 dias
6 days ago
Lesson Completed
+5 XP
1 week ago
Chapter Completed
- Codificação não é criptografia
+1 XP
1 week ago
Lesson Completed
+16 XP
1 week ago
Lesson Completed
+11 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Lesson Completed
+16 XP
1 week ago
Lesson Completed
+10 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Chapter Completed
- A mentalidade hacker
+1 XP
1 week ago
Ativo por 2 dias
2 weeks ago
Flag Found
- Pwnify - Teste de Invasão de Aplicação Web
+350 XP
2 weeks ago
Flag Found
- Pwnify - Teste de Invasão de Aplicação Web
+350 XP
2 weeks ago
Ativo por 4 dias
2 weeks ago
Profile Updated
+1 XP
1 month ago
Ativo por 11 dias
1 month ago
Flag Found
- Host Hijack
+200 XP
1 month ago
Flag Found
- Host Hijack
+200 XP
1 month ago
Flag Found
- Vazamento Mythos - Exposição de rascunhos de CMS headless
+200 XP
1 month ago
Flag Found
- Vazamento Mythos - Exposição de rascunhos de CMS headless
+200 XP
1 month ago
Flag Found
- Pickle Jar
+200 XP
2 months ago
Flag Found
- Pickle Jar
+200 XP
2 months ago
Flag Found
- ClearDesk
+200 XP
2 months ago
Flag Found
- ClearDesk
+200 XP
2 months ago
Ativo por 5 dias
3 months ago
Flag Found
- Token Trust
+50 XP
4 months ago
Chapter Completed
- Personificação de tokens
+1 XP
4 months ago
Chapter Completed
- Ataques de registro
+1 XP
4 months ago
Chapter Completed
- WinPEAS e PowerUp
+1 XP
4 months ago