ChrisMaher
Senior
Activity
160 active days in the last year
Less
More
Rank Progress
Senior
Expert
3176 / 4021 XP
Achievements
Streak Starter
Streak Master
Streak Legend
Lab Rat
Lab Expert
Scholar
Pro Member
CSSMedia QueriesWeb ForensicsSource AnalysisDevToolsJWTAlgorithm ConfusionRS256HS256Token ForgeryWeb SecurityToken AuthenticationCryptographyUnicodeSteganographyPythonText AnalysisZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive SecurityPDF SecurityPassword CrackingDigital ForensicsDocument SecurityBrute Force AttacksClient-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksAuthentication BypassSSHPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityCommand InjectionShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity AssessmentLocal File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalApache SecurityLog AnalysisWeb EnumerationAuthenticationRCEPrivilege EscalationLinuxDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentFile UploadBypass TechniquesPHPWeb ShellsInput ValidationSocial EngineeringPost ExploitationSQL InjectionDatabase SecurityFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityAWS EC2LFIFile Upload BypassPHP SecurityWeb Shell ExploitationFTPCommand LineFile System NavigationHidden FilesgrepfindSecurity Through ObscurityBrowser DevToolsView SourceInformation DisclosureBroken Access ControlHTMLNmapNmap CommandsTelnetPort ScanningNetwork ReconnaissanceCookie PoisoningSession TamperingBase64 EncodingWeb ExploitationView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFCTF BasicsFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Fine Print
Challenge
JWT Algo Confusion
Challenge
JWT Bypass
Challenge
Phantom Text
Challenge
ZIP Cracker
Challenge
PDF Password Cracker
Challenge
Admin Portal Breach
Challenge
Cronpocalypse
Easy
Corporate Backup Deserializer
Challenge
Shell Command Scanner
Challenge
LFI Log Poison
Challenge
Hidden CMS Breach
Medium
Hack the Box
Hard
XXE Exposed
Challenge
File Upload Bypass
Challenge
Auth Bypass
Challenge
Anonymous 2
Easy
Spoof!
Easy
URL Scanner
Challenge
Include me
Easy
FiPloit
Easy
Anonymous
Easy
Linux Fundamentals Practice
Challenge
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Campaign automation
OSINT and pretexting
Vishing attacks
Physical access attacks
Security awareness
Social engineering basics
Malicious payloads
Detection evasion
Smishing attacks
Phishing attacks
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Linux privesc fundamentals
PATH hijacking
Manual enumeration
Linux hardening
Cron job abuse
Container escapes
SUID exploitation
Automated enumeration
Sudo abuse
Kernel exploits
Kerberoasting
AD fundamentals
NTLM relay
DCSync
AD persistence
Lateral movement
Delegation attacks
Password spraying
AD enumeration
AS-REP Roasting
Active reconnaissance
Post-exploitation
Pivoting
Service exploitation
Pentest reporting
Password attacks
MITM attacks
Vulnerability scanning
Network fundamentals
Service enumeration
Heap exploitation
Pwntools
Exploitation defense
Memory protections
Exploitation fundamentals
ROP chains
Shellcode
Buffer overflows
Format strings
Advanced exploitation
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
OSINT
10
Code OSINT
Image OSINT
Google dorking
OSINT fundamentals
Social media OSINT
Email OSINT
Domain recon
OSINT automation
Dark web OSINT
OSINT defense
API Hacking
10
Rate limiting bypass
GraphQL attacks
API injection
API recon
API fuzzing
API security basics
BOLA and IDOR
OWASP API Top 10
API authentication attacks
Mass assignment
Bluetooth attacks
WPA/WPA2 cracking
WEP cracking
WPA Enterprise attacks
Wireless defense
Advanced wireless
Wireless security fundamentals
Client-side attacks
Evil twin attacks
Wireless recon
Rainbow tables
Wireless cracking
PDF cracking
Linux hash cracking
Office Documents cracking
ZIP cracking
Brute force attacks
Password fundamentals
Dictionary attacks
Windows hash cracking
Penetration testing careers
Bug bounty and freelance security
The cybersecurity industry
Governance, risk, and compliance
Digital forensics and incident response
Cloud and application security
Security operations and defense
Building your security portfolio
Landing your first security job
Building your security skill stack
Android architecture
Data storage flaws
iOS architecture
Mobile API testing
Mobile security basics
Runtime manipulation
Security reporting
Static analysis
Frida instrumentation
Certificate pinning bypass
Hydra Cheat Sheet
Nikto Cheat Sheet
John the Ripper Cheat Sheet
SQLMap Cheat Sheet
Wireshark Cheat Sheet
Burp Suite Cheat Sheet
Gobuster Cheat Sheet
Nmap Cheat Sheet
Hashcat Cheat Sheet
Metasploit Cheat Sheet
CSRF Attacks
XXE Injection
SSRF
File Inclusion
Web Security Intro
SSTI
Deserialization
File Upload Attacks
XSS Attacks
Auth Bypass
SQL Injection
Command Injection
Bug Bounty
10
Quick wins
Hunting setup
Automation
Bug bounty basics
Hunting methodology
Avoiding duplicates
Bug bounty career
Recon fundamentals
Report writing
Program selection
GCP enumeration
Cloud defense
Azure exploitation
Azure enumeration
Serverless security
Cloud containers
AWS privilege escalation
GCP exploitation
AWS enumeration
Cloud security basics
Authentication mechanisms
Cookies and sessions
HTTP security headers
HTTP requests and responses
Browser DevTools for recon
HTTPS and TLS
Common web vulnerabilities
URLs, domains, and DNS
HTML and the browser
Same-origin policy and CORS
JWT Basics
JWT Tampering
JWT Cracking
Algorithm Confusion
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Token impersonation
Credential harvesting
Windows kernel exploits
Windows privesc basics
WinPEAS and PowerUp
Service exploitation
UAC bypass
Windows hardening
Windows enumeration
Registry attacks
Active for 3 days
1 week ago
Chapter Completed
- Browser DevTools for recon
+1 XP
1 week ago
Chapter Completed
- Common web vulnerabilities
+1 XP
1 week ago
Chapter Completed
- HTTP security headers
+1 XP
1 week ago
Chapter Completed
- Same-origin policy and CORS
+1 XP
2 weeks ago
Chapter Completed
- HTTPS and TLS
+1 XP
2 weeks ago
Chapter Completed
- Authentication mechanisms
+1 XP
2 weeks ago
Chapter Completed
- HTML and the browser
+1 XP
2 weeks ago
Chapter Completed
- Cookies and sessions
+1 XP
2 weeks ago
Chapter Completed
- URLs, domains, and DNS
+1 XP
2 weeks ago
Chapter Completed
- HTTP requests and responses
+1 XP
2 weeks ago
Chapter Completed
- Exploitation defense
+1 XP
3 weeks ago
Chapter Completed
- Advanced exploitation
+1 XP
3 weeks ago
Chapter Completed
- Shellcode
+1 XP
3 weeks ago
Chapter Completed
- Pwntools
+1 XP
3 weeks ago
Chapter Completed
- Heap exploitation
+1 XP
3 weeks ago
Chapter Completed
- Format strings
+1 XP
3 weeks ago
Chapter Completed
- ROP chains
+1 XP
3 weeks ago
Chapter Completed
- Memory protections
+1 XP
4 weeks ago
Chapter Completed
- Buffer overflows
+1 XP
4 weeks ago
Chapter Completed
- Exploitation fundamentals
+1 XP
4 weeks ago
Chapter Completed
- Wireless defense
+1 XP
1 month ago
Chapter Completed
- Advanced wireless
+1 XP
1 month ago
Chapter Completed
- Bluetooth attacks
+1 XP
1 month ago
Chapter Completed
- Client-side attacks
+1 XP
1 month ago
Chapter Completed
- WPA Enterprise attacks
+1 XP
1 month ago
Chapter Completed
- Evil twin attacks
+1 XP
1 month ago
Chapter Completed
- WEP cracking
+1 XP
1 month ago
Chapter Completed
- WPA/WPA2 cracking
+1 XP
1 month ago
Chapter Completed
- Wireless recon
+1 XP
1 month ago
Chapter Completed
- Wireless security fundamentals
+1 XP
1 month ago
Chapter Completed
- OSINT defense
+1 XP
1 month ago
Chapter Completed
- OSINT automation
+1 XP
1 month ago
Chapter Completed
- Code OSINT
+1 XP
1 month ago
Chapter Completed
- Dark web OSINT
+1 XP
1 month ago
Chapter Completed
- Image OSINT
+1 XP
1 month ago
Chapter Completed
- Google dorking
+1 XP
1 month ago
Chapter Completed
- Email OSINT
+1 XP
1 month ago
Chapter Completed
- Social media OSINT
+1 XP
1 month ago
Chapter Completed
- Domain recon
+1 XP
1 month ago
Chapter Completed
- OSINT fundamentals
+1 XP
1 month ago
Chapter Completed
- Bug bounty career
+1 XP
1 month ago
Chapter Completed
- Automation
+1 XP
1 month ago
Chapter Completed
- Avoiding duplicates
+1 XP
1 month ago
Chapter Completed
- Report writing
+1 XP
1 month ago
Chapter Completed
- Quick wins
+1 XP
1 month ago
Chapter Completed
- Hunting methodology
+1 XP
1 month ago
Chapter Completed
- Recon fundamentals
+1 XP
1 month ago