3xpl0it3r
✦ Legend ✦
It's the story of the moon and the ocean. It begins where it ends.
Activity
182 active days in the last year
Less
More
Rank Progress
✦ Legend ✦
Max Rank
Achievements
First Blood
Blood Hunter
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Writer
Top 10
Pro Member
Web ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePrivilege EscalationPythonPickle DeserializationRCELinuxIDORAPI SecurityPath TraversalAccess ControlOAuth 2.0JWTWeb ReconConfiguration ExploitsHost Header InjectionPassword Reset PoisoningCommand InjectionHTTP HeadersCSSMedia QueriesWeb ForensicsSource AnalysisDevToolsUnicodeSteganographyText AnalysisSSHFile EnumerationCron JobsConfiguration AnalysisCommand LineFile System NavigationHidden FilesgrepfindDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBWeb EnumerationAuthenticationClient-Side SecuritySecurity Through ObscurityBrowser DevToolsView SourceBroken Access ControlHTMLPassword CrackingLinux SecurityJohn the RipperhashcatCryptographyCVE ExploitationWindows SecurityNTLMHashcatHash AnalysisSQL InjectionRegex BypassInput ValidationWeb Application SecuritySQLiteUNION-Based SQLiOffice SecurityHash ExtractionGitVersion ControlSource Code AnalysisReconnaissanceSSRFURL ManipulationInternal Network AccessProtocol BypassEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationClassical CiphersImage AnalysisPolyalphabetic CiphersHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisJavaScriptDeobfuscationCode AnalysisAuthentication BypassDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessSSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPHPType JugglingPassword AnalysisSecurity ToolsDatabase SecurityPenetration TestingFile DiscoveryInformation GatheringYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesParameter ManipulationAuthorization BypassSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationCookie ManipulationCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDOM ManipulationGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationIP SpoofingAccess Control BypassSUID BinariesFrequency AnalysisPattern RecognitionDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFilter EvasionNoSQL InjectionMongoDBDocument DatabasesLDAP InjectionDirectory ServicesEnterprise SecurityJWT ManipulationSSH ExploitationLog InjectionServer-Side Template InjectionJinja2 ExploitationWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationDigital ForensicsWindows RegistryPersistence AnalysisIncident ResponseMalware AnalysisWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationVisibility ControlsSecurity TestingOperator ExploitationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementLinux Privilege EscalationFile PermissionsBypass TechniquesWeb ShellsPost ExploitationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2XSSCross-Site ScriptingStored XSSSession HijackingClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityAlgorithm ConfusionRS256HS256Token ForgeryToken AuthenticationService DiscoveryCommand Line ToolsForensicsAttack DetectionLogic FlawCGIFlaskDebug ModeMemory AnalysisTransposition CipherRail FenceAudio AnalysisLSBPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionNetwork AnalysisDNSCryptanalysisClassical CryptoData EncodingSession ManagementJenkinsCI/CDDevOpsPentestAutomationNetwork ReconnaissanceDatabase ForensicsCLI UsageData RecoveryBase64Hex EncodingRedisMemory ForensicsBinary AnalysisTool UsageROT13 EncodingWeb HackingLogic FlawsToken ManipulationBase64 EncodingQR Code AnalysisWeb InspectionHTML AnalysisHex EditorsData StructuresReverse EngineeringMD5Rainbow TablesWeb DevelopmentWebCTF BasicsPacket CaptureWiresharkProtocol AnalysisHexadecimalFile Upload BypassPHP SecurityWeb Shell ExploitationWEBAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationLinux CapabilitiesReverse ShellSystem EnumerationWPApache TomcatWAR DeploymentDefault CredentialsSudoMYSQLIGITFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsNmapNmap CommandsTelnetPort ScanningCookie PoisoningSession TamperingIP SPOOFINGView Source Code
Pickle Jar
Medium
ClearDesk
Medium
Token Trust
Challenge
Host Hijack
Medium
Fine Print
Challenge
Phantom Text
Challenge
Scheduled Sabotage
Easy
Linux Fundamentals Practice
Challenge
Hack the Box
Hard
Hidden CMS Breach
Medium
Shadow Cracker
Challenge
TechNova Infiltration
Medium
Windows Password Cracker
Challenge
Regex Bypass to SQLi
Challenge
Office Password Cracker
Challenge
Git Exposed
Challenge
SSRF Validator
Challenge
Email Header Forensics
Challenge
Vigenere Stego Hunt
Challenge
HTTP Smuggling
Challenge
Hack This Site
Challenge
Simple Directory Traversal
Challenge
FortiPy
Hard
Type Juggling Bypass
Challenge
Crack SHA1 Hash
Challenge
SQL Injection Test
Challenge
Backup Hunter
Challenge
YAML Bomb
Challenge
WebDAV Explorer
Challenge
Race Condition Hunter
Challenge
Prototype Pollution Hunter
Challenge
IDOR Explorer
Challenge
Header Hijacker
Challenge
Corporate Directory Hunt
Challenge
File Include Bypass
Challenge
Cookie Forge
Challenge
Redis Cache Poisoner
Challenge
Button Activator
Challenge
GraphQL Gateway
Challenge
DNS Tunneling Detective
Challenge
IP Spoofing Admin
Challenge
SUID Privilege Hunter
Challenge
Caesar Shift Decoder
Challenge
Registry Hijacker
Challenge
RCE Playground
Medium
MongoDB Injector
Challenge
LDAP Injector
Challenge
Infiltrator
Easy
Template Injector
Challenge
WEP Cracker
Challenge
Registry Hunter
Challenge
WiFi Password Cracker
Challenge
Corporate Backup Deserializer
Challenge
Book Cipher Challenge
Challenge
Admin Portal Breach
Challenge
Git Secrets Hunter
Challenge
ZIP Cracker
Challenge
KeePass Breaker
Challenge
Template Injection
Challenge
PDF Password Cracker
Challenge
LFI Log Poison
Challenge
Shell Command Scanner
Challenge
NoSQL Injection
Challenge
CSRF Bank Transfer
Challenge
Alpwned
Medium
File Upload Bypass
Challenge
URL Scanner
Challenge
XSS Playground
Challenge
JWT Claims Manipulation
Challenge
SQL Injection
Challenge
XXE Exposed
Challenge
JWT Algo Confusion
Challenge
JWT Bypass
Challenge
Ping Pwn
Challenge
Auth Bypass
Challenge
Log Hunter
Challenge
API Logic Flaw
Challenge
Path Traversal
Challenge
Flask Error
Challenge
Rail Fence
Challenge
Sonic Cipher
Challenge
Pixel Puzzler
Challenge
PDF Trap
Challenge
Blockchain Secrets
Challenge
Corporate Breach 2
Challenge
Corporate Breach
Challenge
DNS Exfil
Challenge
Crypto Cipher
Challenge
Session Switch
Challenge
Snapchat Exposed
Challenge
Red is Dead
Challenge
Memory Forensics
Challenge
API Breaker
Challenge
QR Code Quest
Challenge
Base64 Detective
Challenge
Binary Secrets
Challenge
Get the Password
Challenge
Stego Hunt
Challenge
Packet Pursuit
Challenge
Hex Hunt
Challenge
FiPloit
Easy
AlVault
Medium
Compromised 2
Hard
Broken Chain
Hard
Internal
Hard
WP Ultimate
Hard
Compromised 1
Medium
Query Quake
Medium
Matsudo
Medium
Traversed
Medium
Beyond Echo
Medium
Cronpocalypse
Easy
Anonymous 2
Easy
Anonymous
Easy
Hack the Login
Very Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Spoof!
Easy
Include me
Easy
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Rainbow tables
Wireless cracking
PDF cracking
Linux hash cracking
Office Documents cracking
ZIP cracking
Brute force attacks
Password fundamentals
Dictionary attacks
Windows hash cracking
Linux privesc fundamentals
Active reconnaissance
Post-exploitation
Pivoting
Service exploitation
Pentest reporting
Password attacks
MITM attacks
Vulnerability scanning
Network fundamentals
Service enumeration
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
CSRF Attacks
XXE Injection
SSRF
File Inclusion
Web Security Intro
SSTI
Deserialization
File Upload Attacks
XSS Attacks
Auth Bypass
SQL Injection
Command Injection
JWT Basics
JWT Tampering
JWT Cracking
Algorithm Confusion
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Active for 1 days
3 days ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
1 week ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
1 week ago
Active for 3 days
2 weeks ago
Flag Found
- Pickle Jar
+200 XP
2 months ago
Flag Found
- Pickle Jar
+200 XP
2 months ago
Active for 9 days
2 months ago
Flag Found
- ClearDesk
+200 XP
3 months ago
Flag Found
- ClearDesk
+200 XP
3 months ago
Flag Found
- Token Trust
+50 XP
3 months ago
Flag Found
- Host Hijack
+200 XP
3 months ago
Flag Found
- Host Hijack
+200 XP
3 months ago
Active for 4 days
3 months ago
Flag Found
- Fine Print
+50 XP
3 months ago
Active for 1 days
4 months ago
Flag Found
- Phantom Text
+50 XP
4 months ago
Active for 4 days
4 months ago
Flag Found
- Scheduled Sabotage
+100 XP
4 months ago
Flag Found
- Scheduled Sabotage
+100 XP
4 months ago
Active for 9 days
4 months ago
Chapter Completed
- Linux privesc fundamentals
+1 XP
5 months ago
Active for 3 days
5 months ago
Chapter Completed
- Pentest reporting
+1 XP
5 months ago
Chapter Completed
- Post-exploitation
+1 XP
5 months ago