skalvin
Grandmaster
¯\_(ツ)_/¯ Mess with the best, die like the rest
Atividade
197 dias ativos no ultimo ano
Menos
Mais
Progresso de Rank
Grandmaster
✦ Legend ✦
17096 / 17284 XP
Conquistas
Primeiro Sangue
Sequência Iniciante
Mestre da Sequência
Rato de Lab
Especialista de Lab
Mestre de Lab
Estudioso
Top 10
Reverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraWeb Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingHost Header InjectionPassword Reset PoisoningPrivilege EscalationHTTP HeadersWeb ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePythonPickle DeserializationRCELinuxIDORAPI SecurityPath TraversalAccess ControlOAuth 2.0JWTWeb ReconConfiguration ExploitsUnicodeSteganographyWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsCommand LineFile System NavigationHidden FilesgrepfindAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisHex EditorsData StructuresFile AnalysisWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassMemory ForensicsDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 EncodingWeb SecuritySession ManagementAuthenticationPHPFile UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationAudio AnalysisLSBForensicsKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsAlgorithm ConfusionRS256HS256Token ForgeryLogic FlawParameter ManipulationMD5Rainbow TablesDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperWeb EnumerationWPClient-Side SecuritySecurity Through ObscurityView SourceBroken Access ControlHTMLIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationPassword CrackingLinux SecurityJohn the RipperhashcatCryptographySSHWindows SecurityNTLMHashcatHash AnalysisOffice SecurityHash ExtractionSQL InjectionRegex BypassSQLiteUNION-Based SQLiGitVersion ControlSource Code AnalysisReconnaissanceFile DiscoveryInformation GatheringType JugglingPassword AnalysisSecurity ToolsDatabase SecurityDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSSTIFlask SecuritySSH Brute ForceDatabase EnumerationClassical CiphersPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRace ConditionsTiming AttacksConcurrent ExploitationSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationCookie ManipulationDOM ManipulationFilter EvasionGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationFrequency AnalysisDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationSUID BinariesNoSQL InjectionMongoDBDocument DatabasesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationLDAP InjectionDirectory ServicesEnterprise SecurityJWT ManipulationSSH ExploitationLog InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksIP SpoofingAccess Control BypassJinja2 ExploitationWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationWindows RegistryPersistence AnalysisMalware AnalysisHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisVisibility ControlsSecurity TestingOperator ExploitationReverse ShellSystem EnumerationNetwork ReconnaissanceServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File PermissionsCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementXSSCross-Site ScriptingStored XSSSession HijackingCGIClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityToken AuthenticationService DiscoveryCommand Line ToolsAttack DetectionFlaskDebug ModeMemory AnalysisTransposition CipherRail FencePDF ForensicsMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionDNSCryptanalysisClassical CryptoData EncodingJenkinsCI/CDDevOpsPentestAutomationDatabase ForensicsCLI UsageBase64Hex EncodingRedisQR Code AnalysisMYSQLIWeb InspectionHTML AnalysisWEBFile Upload BypassPHP SecurityWeb Shell ExploitationApache TomcatWAR DeploymentDefault CredentialsSudoGITView Source CodeNmapNmap CommandsTelnetPort ScanningFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsIP SPOOFINGCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning Path
Host Hijack
Médio
Pickle Jar
Médio
ClearDesk
Médio
Token Trust
Desafio
Phantom Text
Desafio
Fine Print
Desafio
Prática de fundamentos Linux
Desafio
Compromised 2
Difícil
Hex Hunt
Desafio
Stego Hunt
Desafio
Packet Pursuit
Desafio
Binary Secrets
Desafio
API Breaker
Desafio
Memory Forensics
Desafio
Session Switch
Desafio
File Upload Bypass
Desafio
Sonic Cipher
Desafio
KeePass Breaker
Desafio
JWT Algo Confusion
Desafio
API Logic Flaw
Desafio
Get the Password
Desafio
Hack the Box
Difícil
Hidden CMS Breach
Médio
WP Ultimate
Difícil
Broken Chain
Difícil
Shadow Cracker
Desafio
TechNova Infiltration
Médio
Windows Password Cracker
Desafio
Office Password Cracker
Desafio
Regex Bypass to SQLi
Desafio
Git Exposed
Desafio
Backup Hunter
Desafio
Type Juggling Bypass
Desafio
Crack SHA1 Hash
Desafio
Teste de injeção SQL
Desafio
Hack This Site
Desafio
HTTP Smuggling
Desafio
Email Header Forensics
Desafio
SSRF Validator
Desafio
FortiPy
Difícil
Vigenère Stego Hunt
Desafio
Simple Directory Traversal
Desafio
YAML Bomb
Desafio
WebDAV Explorer
Desafio
Prototype Pollution Hunter
Desafio
Race Condition Hunter
Desafio
IDOR Explorer
Desafio
Header Hijacker
Desafio
Corporate Directory Hunt
Desafio
File Include Bypass
Desafio
Cookie Forge
Desafio
Button Activator
Desafio
RCE Playground
Médio
GraphQL Gateway
Desafio
DNS Tunneling Detective
Desafio
Caesar Shift Decoder
Desafio
Registry Hijacker
Desafio
SUID Privilege Hunter
Desafio
MongoDB Injector
Desafio
Redis Cache Poisoner
Desafio
LDAP Injector
Desafio
Infiltrator
Fácil
Corporate Backup Deserializer
Desafio
IP Spoofing Admin
Desafio
Template Injector
Desafio
WiFi Password Cracker
Desafio
WEP Cracker
Desafio
Registry Hunter
Desafio
Book Cipher Challenge
Desafio
Admin Portal Breach
Desafio
Git Secrets Hunter
Desafio
ZIP Cracker
Desafio
Template Injection
Desafio
PDF Password Cracker
Desafio
Shell Command Scanner
Desafio
LFI Log Poison
Desafio
NoSQL Injection
Desafio
Internal
Difícil
URL Scanner
Desafio
Alpwned
Médio
CSRF Bank Transfer
Desafio
XSS Playground
Desafio
Path Traversal
Desafio
JWT Claims Manipulation
Desafio
SQL Injection
Desafio
XXE Exposed
Desafio
JWT Bypass
Desafio
Auth Bypass
Desafio
Ping Pwn
Desafio
Log Hunter
Desafio
Flask Error
Desafio
Rail Fence
Desafio
Pixel Puzzler
Desafio
PDF Trap
Desafio
Blockchain Secrets
Desafio
Corporate Breach 2
Desafio
Corporate Breach
Desafio
DNS Exfil
Desafio
Crypto Cipher
Desafio
Snapchat Exposed
Desafio
Red is Dead
Desafio
QR Code Quest
Desafio
Query Quake
Médio
Base64 Detective
Desafio
AlVault
Médio
FiPloit
Fácil
Compromised 1
Médio
Traversed
Médio
Matsudo
Médio
Beyond Echo
Médio
Cronpocalypse
Fácil
Include me
Fácil
Anonymous 2
Fácil
Anonymous
Fácil
Spoof!
Fácil
Hack the Login
Muito Fácil
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Reconhecimento ativo
Pós-exploração
Pivoteamento
Exploração de serviços
Relatórios de pentest
Ataques de senha
Ataques MITM
Varredura de vulnerabilidades
Fundamentos de rede
Enumeração de serviços
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Como as senhas são quebradas
Codificação não é criptografia
A mentalidade hacker
Rainbow tables
Quebra de wireless
Quebra de PDF
Quebra de hashes Linux
Quebra de Documentos Office
Quebra de ZIP
Ataques de força bruta
Fundamentos de senhas
Ataques de dicionário
Quebra de hashes Windows
Cheat Sheet do Hydra
Cheat Sheet do Nikto
Cheat Sheet do John the Ripper
Cheat Sheet do SQLMap
Cheat Sheet do Wireshark
Cheat Sheet do Burp Suite
Cheat Sheet do Gobuster
Cheat Sheet do Nmap
Cheat Sheet do Hashcat
Cheat Sheet do Metasploit
Ataques Web
12
Ataques CSRF
Injeção XXE
SSRF
Inclusão de Arquivos
Intro Segurança Web
SSTI
Desserialização
Ataques File Upload
Ataques XSS
Bypass de Auth
Injeção SQL
Injeção de Comandos
Bug Bounty
10
Ganhos rápidos
Configuração de caça
Automação
Básicos de bug bounty
Metodologia de caça
Evitando duplicatas
Carreira bug bounty
Fundamentos de recon
Escrita de relatórios
Seleção de programas
Fundamentos JWT
Adulteração JWT
Quebra de JWT
Confusão de Algoritmo
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Personificação de tokens
Básicos de privesc Windows
WinPEAS e PowerUp
Exploração de serviços
Enumeração Windows
Ataques de registro
CVE
1
CVE-2024-34899
Ativo por 1 dias
13 hours ago
Daily Hack Solved
- Count the layers
+10 XP
1 day ago
Daily Hack Solved
- The total you do not see
+10 XP
2 days ago
Daily Hack Solved
- How long does it live
+10 XP
3 days ago
Daily Hack Solved
- The alibi that breaks
+10 XP
4 days ago
Daily Hack Solved
- Recover the XOR key
+10 XP
5 days ago
Daily Hack Solved
- Find the safe one
+10 XP
6 days ago
Streak Frozen
1 week ago
Daily Hack Solved
- Count the compromised
+10 XP
1 week ago
Streak Frozen
1 week ago
Daily Hack Solved
- When did the backups die
+10 XP
1 week ago
Daily Hack Solved
- Follow the ransom BTC
+10 XP
1 week ago
Daily Hack Solved
- Single-byte XOR
+10 XP
1 week ago
Daily Hack Solved
- Who pulled the keys
+10 XP
1 week ago
Daily Hack Solved
- PEM, not JPG
+10 XP
2 weeks ago
Daily Hack Solved
- A token you can read
+10 XP
2 weeks ago
Daily Hack Solved
- Decode the stored credential
+10 XP
2 weeks ago
Daily Hack Solved
- Find the leaked AWS key
+10 XP
2 weeks ago
Daily Hack Solved
- Who got root
+10 XP
3 weeks ago
Daily Hack Solved
- Read the system prompt
+10 XP
3 weeks ago
Daily Hack Solved
- Forge the group claim
+10 XP
3 weeks ago
Daily Hack Solved
- The webview endpoint
+10 XP
3 weeks ago
Daily Hack Solved
- Find the reentrancy bug
+10 XP
3 weeks ago
Daily Hack Solved
- SSRF to the internal KV store
+10 XP
4 weeks ago
Daily Hack Solved
- Open the app sandbox
+10 XP
4 weeks ago
Daily Hack Solved
- Find the SQLi probe
+10 XP
1 month ago
Daily Hack Solved
- Find the employer
+10 XP
1 month ago
Daily Hack Solved
- Decrypt the ransom note
+10 XP
1 month ago
Daily Hack Solved
- The token names the host
+10 XP
1 month ago
Daily Hack Solved
- Find the tool-exec RCE sink
+10 XP
1 month ago
Daily Hack Solved
- PNG, not TXT
+10 XP
1 month ago
Daily Hack Solved
- Find the hidden email
+10 XP
1 month ago
Daily Hack Solved
- Loot the instance role
+10 XP
1 month ago
Ativo por 1 dias
1 month ago
Daily Hack Solved
- Vigenere then base64
+10 XP
1 month ago
Daily Hack Solved
- Read the JWT claim
+10 XP
1 month ago
Ativo por 1 dias
1 month ago
Daily Hack Solved
- Flip the debug flag
+10 XP
1 month ago
Daily Hack Solved
- Read the shell history
+10 XP
1 month ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 month ago
Daily Hack Solved
- Unwrap the C2 beacon
+10 XP
1 month ago
Daily Hack Solved
- Forge the tier
+10 XP
1 month ago
Daily Hack Solved
- Extract the XOR key
+10 XP
1 month ago
Daily Hack Solved
- The DEX header
+10 XP
1 month ago
Daily Hack Solved
- The hidden system prompt
+10 XP
1 month ago
Daily Hack Solved
- Unshift the letters
+10 XP
1 month ago
Daily Hack Solved
- Mass assign yourself admin
+10 XP
1 month ago
Daily Hack Solved
- Pivot three hops to the vault
+10 XP
1 month ago
Daily Hack Solved
- Dox the domain owner
+10 XP
1 month ago
Daily Hack Solved
- Spot the exfil
+10 XP
2 months ago