AzmiJO
✦ Legend ✦
Ranking
#4
Melhor: #1
Total de Pontos
1466
Total Ganho
Labs Concluídos
113
115 User • 18 Root
Módulos
39
Validados
Primeiros Sangues
2
Primeiro a Concluir
Melhor Sequência
10
Dias
Habilidades Adquiridas
Habilidades técnicas praticadas através dos labs concluídos
LinuxCommand LineFile System NavigationHidden FilesgrepfindWeb EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning PathPassword CrackingLinux SecurityJohn the RipperhashcatCryptographySSHCVE ExploitationWindows SecurityNTLMHashcatHash AnalysisOffice SecurityHash ExtractionGitVersion ControlReconnaissanceFile DiscoveryInformation GatheringPHPType JugglingAuthentication BypassHash CrackingPassword AnalysisSecurity ToolsSQL InjectionDatabase SecurityInput ValidationPenetration TestingJavaScriptDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSteganographyClassical CiphersImage AnalysisPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessWeb Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesIDORParameter ManipulationAuthorization BypassHTTP HeadersSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationJWTCookie ManipulationPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementFlaskDebug ModePythonMemory AnalysisNetwork AnalysisDNSData ExfiltrationSession ManagementAlgorithm ConfusionRS256HS256Token ForgeryUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentWebCTF BasicsDOM ManipulationGraphQLSchema IntrospectionInjectionFilter EvasionDNS AnalysisIP SpoofingAccess Control BypassSUID BinariesFrequency AnalysisPattern RecognitionDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationNoSQL InjectionMongoDBDocument DatabasesWeb ExploitationService DiscoveryNetwork SecurityIncident ResponseCommand Line ToolsForensicsAttack DetectionLDAP InjectionDirectory ServicesJWT ManipulationSSH ExploitationLog InjectionServer-Side Template InjectionJinja2 ExploitationWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationHistorical CryptanalysisWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingDigital ForensicsWindows RegistryPersistence AnalysisMalware AnalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsHTTP Parameter ManipulationVisibility ControlsSecurity TestingOperator ExploitationBypass TechniquesWeb ShellsPost ExploitationLinux Privilege EscalationFile PermissionsServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2XSSCross-Site ScriptingStored XSSSession HijackingClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiToken AuthenticationLogic FlawPath TraversalCGITransposition CipherRail FenceAudio AnalysisLSBPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionCryptanalysisClassical CryptoData EncodingJenkinsCI/CDDevOpsPentestAutomationNetwork ReconnaissanceDatabase ForensicsCLI UsageData RecoveryBase64Hex EncodingRedisMemory ForensicsBinary AnalysisTool UsageROT13 EncodingWeb HackingLogic FlawsToken ManipulationBase64 EncodingQR Code AnalysisWeb InspectionHTML AnalysisHex EditorsData StructuresReverse EngineeringMD5Rainbow TablesWeb DevelopmentPacket CaptureWiresharkProtocol AnalysisHexadecimalFile Upload BypassPHP SecurityWeb Shell ExploitationWEBIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationTELNETNetworkingWeb ServicesLinux CapabilitiesReverse ShellSystem EnumerationAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationApache TomcatWAR DeploymentDefault CredentialsSudoGITWPMYSQLIFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGFTP
Módulos Concluídos
Módulos educacionais validados com sucesso
Nmap Mastery: Dominate Network Scanning
4 módulosInstalling Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
HTTP Header Manipulation: IP Spoofing
3 módulosRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Password Cracking: Advanced Techniques for Security Assessment
8 módulosRainbow Tables and Precomputed Attacks
Wireless Network Password Attacks
PDF Password Cracking and Document Security
Linux Password Cracking (Shadow Files)
Brute Force and Hybrid Attack Techniques
Password Security Fundamentals
Dictionary Attacks and Wordlist Optimization
Windows System Password Recovery
Network Penetration Testing: From Reconnaissance to Shell Access
1 módulosNetwork Fundamentals for Pentesters
HDNA Ethical Hacking Course
5 módulos1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Web Application Security: Exploitation and Defense
12 módulosCross-Site Request Forgery
XML External Entity Injection
Server-Side Request Forgery
Local and Remote File Inclusion
Course Introduction
Server-Side Template Injection
Deserialization Attacks
File Upload Exploitation
Cross-Site Scripting
Authentication Bypass
SQL Injection
Command Injection
JWT Ethical Hacking: Token Takeover Tactics
3 módulosIntroduction to JWT Tokens
Claims Manipulation and Time-Based Attacks
Secret Key Brute Forcing
Remote Code Execution (RCE)
3 módulosShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Labs & Desafios Concluídos
Desafios práticos de cibersegurança concluídos com sucesso
Linux Fundamentals Practice
Extremo
LinuxCommand LineFile System NavigationHidden Filesgrepfind
Hidden CMS Breach
Médio
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
Hack the Box
Difícil
Directory FuzzingX-Forwarded-For SpoofingBruteforceffufCommand InjectionNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDB
Secrets in Source 2
Muito Fácil
Web SecurityHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning Path
Shadow Cracker
Extremo
Password CrackingLinux SecurityJohn the RipperhashcatCryptography
TechNova Infiltration
Médio
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Windows Password Cracker
Extremo
Password CrackingWindows SecurityNTLMHashcatJohn the RipperHash Analysis
Office Password Cracker
Extremo
Password CrackingOffice SecurityHash ExtractionJohn the RipperHashcat
Git Exposed
Extremo
GitVersion ControlSource Code AnalysisReconnaissanceWeb Security
Backup Hunter
Extremo
Web EnumerationFile DiscoveryReconnaissanceInformation Gathering
Type Juggling Bypass
Extremo
Web SecurityPHPType JugglingAuthentication BypassHash Analysis
Crack SHA1 Hash
Extremo
CryptographyHash CrackingPassword AnalysisSecurity Tools
SQL Injection Test
Extremo
SQL InjectionWeb SecurityDatabase SecurityAuthentication BypassInput ValidationPenetration Testing
Hack This Site
Extremo
JavaScriptDeobfuscationClient-Side SecurityBrowser DevToolsCode AnalysisAuthentication Bypass
HTTP Smuggling
Extremo
HTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisWeb SecurityPacket Analysis
Email Header Forensics
Extremo
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
SSRF Validator
Extremo
SSRFWeb SecurityURL ManipulationInternal Network AccessProtocol Bypass
Vigenere Stego Hunt
Extremo
CryptographySteganographyClassical CiphersImage AnalysisPolyalphabetic Ciphers
Simple Directory Traversal
Extremo
Directory TraversalPath InjectionFile System SecurityWeb SecurityInput ValidationPath ManipulationFile Access
FortiPy
Difícil
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
YAML Bomb
Extremo
YAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing Security
WebDAV Explorer
Extremo
WebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System Enumeration
Prototype Pollution Hunter
Extremo
Prototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web Vulnerabilities
IDOR Explorer
Extremo
IDORParameter ManipulationWeb Application SecurityAuthorization Bypass
Header Hijacker
Extremo
HTTP HeadersSecurity BypassWeb Application SecurityClient-Side Manipulation
Corporate Directory Hunt
Extremo
Directory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity Assessment
File Include Bypass
Extremo
Local File InclusionFilter BypassApache AuthenticationPassword Cracking
Cookie Forge
Extremo
JWTCookie ManipulationAuthentication BypassPrivilege Escalation
Corporate Backup Deserializer
Extremo
Python PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise Security
Redis Cache Poisoner
Extremo
CRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationWeb Security
CSRF Bank Transfer
Extremo
CSRFCross-Site Request ForgerySession SecurityWeb SecuritySocial EngineeringForm SecurityHTTP SecurityState Management
Flask Error
Extremo
FlaskDebug ModePythonWeb SecurityMemory Analysis
DNS Exfil
Extremo
Network AnalysisDNSPacket AnalysisData ExfiltrationBase64 Decoding
Session Switch
Extremo
Web SecuritySession ManagementAuthenticationPrivilege EscalationPHP
JWT Algo Confusion
Extremo
JWTAlgorithm ConfusionRS256HS256Token ForgeryWeb Security
LFI Log Poison
Extremo
Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalWeb SecurityApache SecuritySystem AdministrationLog Analysis
XXE Exposed
Extremo
XXEXML SecurityFile DisclosureExternal EntityWeb SecurityVulnerability Assessment
Stego Hunt
Extremo
SteganographyImage AnalysisWebCTF Basics
Button Activator
Extremo
JavaScriptBrowser DevToolsDOM ManipulationClient-Side Security
GraphQL Gateway
Extremo
GraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjection
RCE Playground
Médio
Command InjectionInput Validation BypassRemote Code ExecutionFilter EvasionWeb Security
DNS Tunneling Detective
Extremo
Network ForensicsDNS AnalysisData ExfiltrationTraffic Analysis
IP Spoofing Admin
Extremo
Web SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation Gathering
SUID Privilege Hunter
Extremo
SUID BinariesPrivilege EscalationCommand InjectionLinux SecurityBinary Exploitation
Caesar Shift Decoder
Extremo
CryptographyClassical CiphersFrequency AnalysisPattern Recognition
Registry Hijacker
Extremo
Docker Registry APIAuthentication BypassContainer SecurityAPI ManipulationRegistry Exploitation
MongoDB Injector
Extremo
NoSQL InjectionMongoDBAuthentication BypassDocument DatabasesWeb Security
Ping Pwn
Extremo
Command InjectionWeb ExploitationService DiscoveryNetwork Security
Log Hunter
Extremo
Log AnalysisWeb SecurityIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity Assessment
LDAP Injector
Extremo
LDAP InjectionAuthentication BypassDirectory ServicesEnterprise SecurityWeb Security
Infiltrator
Fácil
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
Template Injector
Extremo
Server-Side Template InjectionFlask SecurityJinja2 ExploitationRemote Code ExecutionWeb Security
WEP Cracker
Extremo
Wireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol Exploitation
Book Cipher Challenge
Extremo
CryptographyClassical CiphersPattern RecognitionHistorical Cryptanalysis
WiFi Password Cracker
Extremo
WiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityPacket Analysis
Registry Hunter
Extremo
Digital ForensicsWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware Analysis
Admin Portal Breach
Extremo
Client-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksAuthentication Bypass
Git Secrets Hunter
Extremo
Git ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINT
ZIP Cracker
Extremo
ZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive Security
KeePass Breaker
Extremo
KeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool Limitations
Template Injection
Extremo
Server-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPrivilege Escalation
PDF Password Cracker
Extremo
PDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force Attacks
Shell Command Scanner
Extremo
Command InjectionWeb SecurityShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity Assessment
NoSQL Injection
Extremo
NoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator Exploitation
File Upload Bypass
Extremo
File UploadWeb SecurityBypass TechniquesPHPWeb ShellsInput ValidationSocial EngineeringPost Exploitation
Alpwned
Médio
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
URL Scanner
Extremo
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2
XSS Playground
Extremo
XSSCross-Site ScriptingStored XSSSession HijackingJavaScriptWeb SecurityClient-Side SecurityDOM Manipulation
JWT Claims Manipulation
Extremo
JWTClaims ManipulationPrivilege EscalationAuthentication BypassTime-Based AttacksSignature Cracking
SQL Injection
Extremo
SQL InjectionDatabase SecurityWeb SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability Assessment
JWT Bypass
Extremo
JWTWeb SecurityToken AuthenticationCryptography
Auth Bypass
Extremo
SQL InjectionAuthentication BypassWeb SecurityDatabase Security
API Logic Flaw
Extremo
API SecurityLogic FlawAuthentication BypassParameter ManipulationPHPWeb Security
Path Traversal
Extremo
Path TraversalCGIWeb SecurityFile AccessDirectory TraversalInput Validation
Rail Fence
Extremo
CryptographyTransposition CipherRail FencePattern RecognitionPython
Sonic Cipher
Extremo
SteganographyAudio AnalysisLSBForensicsPython
Pixel Puzzler
Extremo
SteganographyImage AnalysisLSBForensicsPython
PDF Trap
Extremo
PDF ForensicsFile AnalysisMetadataHidden DataForensic Tools
Blockchain Secrets
Extremo
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic Analysis
Corporate Breach 2
Extremo
Web SecurityPHPLFIPath ManipulationFile Inclusion
Corporate Breach
Extremo
Web SecurityPHPLFIPassword CrackingAuthentication BypassDirectory Traversal
Crypto Cipher
Extremo
CryptanalysisClassical CryptoPattern RecognitionData Encoding
Snapchat Exposed
Extremo
JenkinsCI/CDDevOpsWeb SecurityPentestAutomation
Red is Dead
Extremo
Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedis
Memory Forensics
Extremo
Memory ForensicsBinary AnalysisDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 Encoding
API Breaker
Extremo
API SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization Bypass
QR Code Quest
Extremo
QR Code AnalysisImage AnalysisData ExtractionSteganographyDigital Forensics
Base64 Detective
Extremo
Base64Web InspectionBrowser DevToolsData EncodingHTML Analysis
Binary Secrets
Extremo
Binary AnalysisHex EditorsData StructuresReverse EngineeringFile Analysis
Get the Password
Extremo
JavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevTools
Packet Pursuit
Extremo
Network AnalysisPacket CaptureWiresharkProtocol Analysis
Hex Hunt
Extremo
JavaScriptWeb DevelopmentHexadecimalBrowser DevTools
FiPloit
Fácil
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
AlVault
Médio
WEB
Broken Chain
Difícil
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
Hack the Cookie
Muito Fácil
WEBLearning Path
Nmap Lab 102
Muito Fácil
TELNETLearning Path
Hack the Login
Muito Fácil
WebAuthenticationClient-Side SecurityLearning Path
Onboarding Lab: Access and Flags
Muito Fácil
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Cronpocalypse
Fácil
SSH
Internal
Difícil
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
Compromised 2
Difícil
Advanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassPrivilege Escalation
Compromised 1
Médio
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Traversed
Médio
GIT
WP Ultimate
Difícil
WP
Matsudo
Médio
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Query Quake
Médio
MYSQLIRCE
Beyond Echo
Médio
PHPRCE
Anonymous 2
Fácil
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Spoof!
Fácil
IP SPOOFING
Anonymous
Fácil
FTP
Include me
Fácil
PHPLFI
Secrets in Source
Muito Fácil
HTMLLearning Path
Progresso dos Cursos
Seus caminhos de aprendizado e módulos