bonginc
Master
Online
Just a simple man with a simple plan
Activity
46 active days in the last year
Less
More
Rank Progress
Master
Grandmaster
10082 / 11477 XP
Achievements
First Blood
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Pro Member
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2IDORParameter ManipulationWeb Application SecurityAuthorization BypassAPI SecurityLogic FlawAuthentication BypassPHPLFIPath ManipulationFile InclusionZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive SecurityGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityPassword CrackingDirectory TraversalClient-Side SecurityMD5 CrackingSource Code AnalysisPassword AttacksLocal File InclusionFilter BypassApache AuthenticationCryptographyClassical CiphersFrequency AnalysisPattern RecognitionDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentURL ManipulationInternal Network AccessProtocol BypassNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisCryptanalysisClassical CryptoData EncodingSQL InjectionRegex BypassInput ValidationSQLiteUNION-Based SQLiHTTP HeadersSecurity BypassClient-Side ManipulationSteganographyImage AnalysisPolyalphabetic CiphersJWTCookie ManipulationPrivilege EscalationJavaScriptBrowser DevToolsDOM ManipulationCommand InjectionInput Validation BypassFilter EvasionEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingDigital InvestigationHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisType JugglingHash AnalysisWeb EnumerationFile DiscoveryReconnaissanceInformation GatheringGitVersion ControlJWT ManipulationSSH ExploitationLog InjectionLinux SecurityPath InjectionFile System SecurityFile AccessWindows SecurityNTLMHashcatUnicodeWeb ForensicsPythonText AnalysisPDF SecurityDigital ForensicsDocument SecurityBrute Force AttacksLinuxCommand LineFile System NavigationHidden FilesgrepfindCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackHex EncodingHash CrackingPassword AnalysisSecurity ToolsOffice SecurityHash ExtractionWeb ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbuseHost Header InjectionPassword Reset PoisoningSSHLinux Privilege EscalationFile PermissionsApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsGITToken AuthenticationAuthenticationRCEWEBPickle DeserializationFile EnumerationCron JobsConfiguration AnalysisPath TraversalAccess ControlDatabase SecurityDeobfuscationCode AnalysisCVE ExploitationFile Upload BypassPHP SecurityWeb Shell ExploitationLog AnalysishashcatIncident ResponseCommand Line ToolsForensicsAttack DetectionMYSQLICGISecurity Through ObscurityView SourceBroken Access ControlHTMLService DiscoveryNetwork ReconnaissanceDatabase ForensicsCLI UsageData RecoveryBase64RedisWeb HackingLogic FlawsToken ManipulationBase64 EncodingMemory ForensicsBinary AnalysisTool UsageROT13 EncodingQR Code AnalysisData ExtractionHex EditorsData StructuresReverse EngineeringFile AnalysisMD5Rainbow TablesWeb DevelopmentWebCTF BasicsHexadecimalWeb InspectionHTML AnalysisSession ManagementJenkinsCI/CDDevOpsPentestAutomationNmapNmap CommandsTelnetPort ScanningCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGFTPView Source Code
URL Scanner
Challenge
IDOR Explorer
Challenge
API Logic Flaw
Challenge
Corporate Breach 2
Challenge
ZIP Cracker
Challenge
Git Secrets Hunter
Challenge
YAML Bomb
Challenge
Corporate Breach
Challenge
Admin Portal Breach
Challenge
File Include Bypass
Challenge
Caesar Shift Decoder
Challenge
Corporate Directory Hunt
Challenge
SSRF Validator
Challenge
Packet Pursuit
Challenge
Crypto Cipher
Challenge
Regex Bypass to SQLi
Challenge
Header Hijacker
Challenge
Vigenere Stego Hunt
Challenge
Cookie Forge
Challenge
Button Activator
Challenge
RCE Playground
Medium
Email Header Forensics
Challenge
HTTP Smuggling
Challenge
Type Juggling Bypass
Challenge
Backup Hunter
Challenge
Git Exposed
Challenge
Infiltrator
Easy
Simple Directory Traversal
Challenge
Windows Password Cracker
Challenge
Phantom Text
Challenge
PDF Password Cracker
Challenge
Linux Fundamentals Practice
Challenge
Fine Print
Challenge
Token Trust
Challenge
XOR Reuse
Challenge
Crack SHA1 Hash
Challenge
Office Password Cracker
Challenge
Host Hijack
Medium
Alpwned
Medium
Compromised 1
Medium
Traversed
Medium
JWT Bypass
Challenge
Hidden CMS Breach
Medium
AlVault
Medium
Pickle Jar
Medium
Scheduled Sabotage
Easy
ClearDesk
Medium
Auth Bypass
Challenge
Hack This Site
Challenge
TechNova Infiltration
Medium
FiPloit
Easy
Shadow Cracker
Challenge
SQL Injection Test
Challenge
Log Hunter
Challenge
Query Quake
Medium
Path Traversal
Challenge
Ping Pwn
Challenge
Red is Dead
Challenge
API Breaker
Challenge
Memory Forensics
Challenge
QR Code Quest
Challenge
Binary Secrets
Challenge
Get the Password
Challenge
Stego Hunt
Challenge
Hex Hunt
Challenge
Base64 Detective
Challenge
Session Switch
Challenge
Snapchat Exposed
Challenge
Matsudo
Medium
Cronpocalypse
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Anonymous 2
Easy
Beyond Echo
Medium
Spoof!
Easy
Include me
Easy
Anonymous
Easy
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Password fundamentals
Dictionary attacks
Penetration testing careers
The cybersecurity industry
Security operations and defense
Pipes and data pipelines
Users, groups, and permissions
Filesystem navigation
Process management
Environment and package management
Bash scripting for security
Searching for what matters
Reading and manipulating files
Your first terminal session
Network commands
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Web Security Intro
XSS Attacks
SQL Injection
HTTP requests and responses
URLs, domains, and DNS
JWT Basics
JWT Cracking
Algorithm Confusion
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Hacking 101
10
The network underneath
Vulnerabilities and exploits
How passwords break
Encoding is not encryption
The hacker mindset
Your roadmap
Hacking humans
Hidden in plain sight
Open-source intelligence
The hacker's toolkit
Chapter Completed
- Security operations and defense
+1 XP
17 hours ago
Chapter Completed
- Penetration testing careers
+1 XP
21 hours ago
Daily Hack Solved
- Dox the domain owner
+10 XP
23 hours ago
Daily Hack Solved
- Spot the exfil
+10 XP
1 day ago
Flag Found
- URL Scanner
+50 XP
2 days ago
Daily Hack Solved
- Decode the calldata
+10 XP
2 days ago
Chapter Completed
- Bash scripting for security
+1 XP
2 days ago
Chapter Completed
- The cybersecurity industry
+1 XP
3 days ago
Daily Hack Solved
- The none algorithm
+10 XP
3 days ago
Chapter Completed
- Environment and package management
+1 XP
4 days ago
Chapter Completed
- Network commands
+1 XP
4 days ago
Daily Hack Solved
- Find the SQL injection sink
+10 XP
4 days ago
Flag Found
- IDOR Explorer
+50 XP
5 days ago
Flag Found
- API Logic Flaw
+50 XP
5 days ago
Flag Found
- Corporate Breach 2
+50 XP
5 days ago
Daily Hack Solved
- ZIP in disguise
+10 XP
5 days ago
Chapter Completed
- Process management
+1 XP
6 days ago
Daily Hack Solved
- The comment leak
+10 XP
6 days ago
Lesson Completed
+15 XP
1 week ago
Lesson Completed
+10 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Lesson Completed
+16 XP
1 week ago
Lesson Completed
+11 XP
1 week ago
Chapter Completed
- Pipes and data pipelines
+1 XP
1 week ago
Daily Hack Solved
- One tap of base64
+10 XP
1 week ago
Chapter Completed
- Users, groups, and permissions
+1 XP
1 week ago
Daily Hack Solved
- Pay your own price
+10 XP
1 week ago
Chapter Completed
- Searching for what matters
+1 XP
1 week ago
Chapter Completed
- Reading and manipulating files
+1 XP
1 week ago
Daily Hack Solved
- Leak the app admin token
+10 XP
1 week ago
Daily Hack Solved
- Check the history
+10 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Lesson Completed
+15 XP
1 week ago
Lesson Completed
+11 XP
1 week ago
Flag Found
- ZIP Cracker
+50 XP
1 week ago
Chapter Completed
- URLs, domains, and DNS
+1 XP
1 week ago
Chapter Completed
- HTTP requests and responses
+1 XP
1 week ago
Chapter Completed
- Filesystem navigation
+1 XP
1 week ago
Chapter Completed
- Your first terminal session
+1 XP
1 week ago
Daily Hack Solved
- Trace the phish
+10 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Daily Hack Solved
- Find the break-in
+10 XP
1 week ago
Flag Found
- Git Secrets Hunter
+50 XP
1 week ago
Daily Hack Solved
- Two-layer classic
+10 XP
1 week ago
Chapter Completed
- Algorithm Confusion
+1 XP
2 weeks ago
Flag Found
- YAML Bomb
+50 XP
2 weeks ago
Flag Found
- Corporate Breach
+50 XP
2 weeks ago
Flag Found
- Admin Portal Breach
+50 XP
2 weeks ago
Flag Found
- File Include Bypass
+50 XP
2 weeks ago
Flag Found
- Caesar Shift Decoder
+50 XP
2 weeks ago