captainB
✦ Legend ✦
Activity
142 active days in the last year
Less
More
Rank Progress
✦ Legend ✦
Max Rank
Achievements
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
Web ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePrivilege EscalationWeb Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingPythonPickle DeserializationRCELinuxHost Header InjectionPassword Reset PoisoningHTTP HeadersIDORAPI SecurityPath TraversalAccess ControlDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionWeb SecurityLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBWeb EnumerationAuthenticationClient-Side SecuritySecurity Through ObscurityBrowser DevToolsView SourceBroken Access ControlHTMLPassword CrackingLinux SecurityJohn the RipperhashcatCryptographyWindows SecurityNTLMHashcatHash AnalysisSSHCVE ExploitationGitVersion ControlSource Code AnalysisReconnaissancePHPType JugglingAuthentication BypassPassword AnalysisSecurity ToolsSQL InjectionDatabase SecurityInput ValidationJavaScriptDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSSTIFlask SecuritySSH Brute ForceDatabase EnumerationSteganographyClassical CiphersImage AnalysisPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesParameter ManipulationAuthorization BypassSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisBypass TechniquesWeb ShellsSocial EngineeringPost ExploitationJWTToken AuthenticationLogic FlawFlaskDebug ModeMemory AnalysisCryptanalysisClassical CryptoPattern RecognitionData EncodingJenkinsCI/CDDevOpsPentestAutomationMemory ForensicsBinary AnalysisDigital ForensicsIncident ResponseTool UsageData RecoveryROT13 EncodingNetwork ReconnaissanceService DiscoveryDatabase ForensicsCLI UsageBase64Hex EncodingRedisQR Code AnalysisData ExtractionWeb InspectionHTML AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisMD5Rainbow TablesWeb DevelopmentWebCTF BasicsHexadecimalDOM ManipulationCookie ManipulationGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationFrequency AnalysisDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationJWT ManipulationSSH ExploitationLog InjectionSUID BinariesNoSQL InjectionMongoDBDocument DatabasesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationLDAP InjectionDirectory ServicesEnterprise SecurityServer-Side Template InjectionJinja2 ExploitationFilter EvasionWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityIP SpoofingAccess Control BypassInformation GatheringWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationWindows RegistryPersistence AnalysisMalware AnalysisHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingfcrackzipBrute ForceArchive SecurityJinja2Web Application TestingCode InjectionCGIPDF SecurityDocument SecurityBrute Force AttacksVisibility ControlsSecurity TestingOperator ExploitationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2CSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementFile PermissionsXSSCross-Site ScriptingStored XSSSession HijackingClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityAlgorithm ConfusionRS256HS256Token ForgeryFile DiscoveryCommand Line ToolsForensicsAttack DetectionTransposition CipherRail FenceAudio AnalysisLSBPDF ForensicsMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisLFIFile InclusionDNSMYSQLISession ManagementReverse ShellSystem EnumerationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationWPAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationSudoFile Upload BypassPHP SecurityWeb Shell ExploitationBroken AuthenticationDeveloper ToolsLearning PathWeb HackingLogic FlawsToken ManipulationBase64 EncodingGITIP SPOOFINGApache TomcatWAR DeploymentDefault CredentialsWEBFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPNmapNmap CommandsTelnetPort ScanningCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsView Source CodeCookie PoisoningSession Tampering
Pickle Jar
Medium
Host Hijack
Medium
ClearDesk
Medium
Hack the Box
Hard
Hidden CMS Breach
Medium
Shadow Cracker
Challenge
Windows Password Cracker
Challenge
TechNova Infiltration
Medium
Git Exposed
Challenge
Type Juggling Bypass
Challenge
Crack SHA1 Hash
Challenge
SQL Injection Test
Challenge
Hack This Site
Challenge
HTTP Smuggling
Challenge
Email Header Forensics
Challenge
SSRF Validator
Challenge
FortiPy
Hard
Vigenere Stego Hunt
Challenge
Simple Directory Traversal
Challenge
WebDAV Explorer
Challenge
YAML Bomb
Challenge
Race Condition Hunter
Challenge
Prototype Pollution Hunter
Challenge
IDOR Explorer
Challenge
Header Hijacker
Challenge
Corporate Directory Hunt
Challenge
File Include Bypass
Challenge
Packet Pursuit
Challenge
Shell Command Scanner
Challenge
LFI Log Poison
Challenge
File Upload Bypass
Challenge
JWT Bypass
Challenge
API Logic Flaw
Challenge
Flask Error
Challenge
Crypto Cipher
Challenge
Snapchat Exposed
Challenge
Memory Forensics
Challenge
Red is Dead
Challenge
QR Code Quest
Challenge
Base64 Detective
Challenge
Binary Secrets
Challenge
Get the Password
Challenge
Stego Hunt
Challenge
Hex Hunt
Challenge
Button Activator
Challenge
Cookie Forge
Challenge
GraphQL Gateway
Challenge
DNS Tunneling Detective
Challenge
Caesar Shift Decoder
Challenge
Registry Hijacker
Challenge
Infiltrator
Easy
SUID Privilege Hunter
Challenge
MongoDB Injector
Challenge
Redis Cache Poisoner
Challenge
LDAP Injector
Challenge
Template Injector
Challenge
RCE Playground
Medium
WiFi Password Cracker
Challenge
IP Spoofing Admin
Challenge
WEP Cracker
Challenge
Registry Hunter
Challenge
Book Cipher Challenge
Challenge
Admin Portal Breach
Challenge
Git Secrets Hunter
Challenge
Corporate Backup Deserializer
Challenge
KeePass Breaker
Challenge
ZIP Cracker
Challenge
Template Injection
Challenge
Path Traversal
Challenge
PDF Password Cracker
Challenge
NoSQL Injection
Challenge
URL Scanner
Challenge
CSRF Bank Transfer
Challenge
Alpwned
Medium
XSS Playground
Challenge
JWT Claims Manipulation
Challenge
SQL Injection
Challenge
XXE Exposed
Challenge
JWT Algo Confusion
Challenge
Auth Bypass
Challenge
Ping Pwn
Challenge
Log Hunter
Challenge
Rail Fence
Challenge
Sonic Cipher
Challenge
Pixel Puzzler
Challenge
PDF Trap
Challenge
Blockchain Secrets
Challenge
Corporate Breach 2
Challenge
Corporate Breach
Challenge
DNS Exfil
Challenge
Query Quake
Medium
Session Switch
Challenge
Internal
Hard
Broken Chain
Hard
WP Ultimate
Hard
Compromised 2
Hard
Matsudo
Medium
FiPloit
Easy
Hack the Login
Very Easy
API Breaker
Challenge
Traversed
Medium
Spoof!
Easy
Compromised 1
Medium
AlVault
Medium
Beyond Echo
Medium
Cronpocalypse
Easy
Anonymous 2
Easy
Include me
Easy
Anonymous
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Rainbow tables
Wireless cracking
PDF cracking
Linux hash cracking
Office Documents cracking
ZIP cracking
Brute force attacks
Password fundamentals
Dictionary attacks
Windows hash cracking
Network fundamentals
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
CSRF Attacks
XXE Injection
SSRF
File Inclusion
Web Security Intro
SSTI
Deserialization
File Upload Attacks
XSS Attacks
Auth Bypass
SQL Injection
Command Injection
JWT Basics
JWT Tampering
JWT Cracking
Algorithm Confusion
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Active for 1 days
5 days ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
2 weeks ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
2 weeks ago
Flag Found
- Pwnify - Web Application Penetration Testing
+350 XP
2 weeks ago
Flag Found
- Pwnify - Web Application Penetration Testing
+350 XP
2 weeks ago
Active for 9 days
2 weeks ago
Flag Found
- Pickle Jar
+200 XP
1 month ago
Flag Found
- Pickle Jar
+200 XP
1 month ago
Flag Found
- Host Hijack
+200 XP
1 month ago
Flag Found
- Host Hijack
+200 XP
1 month ago
Flag Found
- ClearDesk
+200 XP
1 month ago
Flag Found
- ClearDesk
+200 XP
1 month ago
Active for 9 days
2 months ago
Chapter Completed
- Network fundamentals
+1 XP
5 months ago
Flag Found
- Hack the Box
+350 XP
5 months ago
Flag Found
- Hack the Box
+350 XP
6 months ago
Active for 5 days
6 months ago
Flag Found
- Hidden CMS Breach
+200 XP
6 months ago
Flag Found
- Hidden CMS Breach
+200 XP
6 months ago
Active for 8 days
6 months ago
Chapter Completed
- Linux hash cracking
+1 XP
7 months ago
Flag Found
- Secrets in Source 2: Bypass Security Through Obscurity
+50 XP
7 months ago
Active for 1 days
7 months ago