dammon
✦ Legend ✦
a king
Activity
33 active days in the last year
Less
More
Rank Progress
✦ Legend ✦
Max Rank
Achievements
First Blood
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Top 10
Max Member
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationCommand InjectionLinux CapabilitiesReverse ShellWeb Application SecuritySystem EnumerationNetwork ReconnaissanceAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationInput Validation BypassRemote Code ExecutionFilter EvasionWeb SecurityJWT ManipulationSSH ExploitationLog InjectionLinux SecurityJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisDOM ManipulationClient-Side SecurityJWTCookie ManipulationLocal File InclusionFilter BypassApache AuthenticationPassword CrackingDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentHTTP HeadersSecurity BypassClient-Side ManipulationIDORParameter ManipulationAuthorization BypassRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationModern Web VulnerabilitiesWebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityInput ValidationPath ManipulationFile AccessCryptographySteganographyClassical CiphersImage AnalysisPolyalphabetic CiphersURL ManipulationInternal Network AccessProtocol BypassWeb EnumerationFile DiscoveryReconnaissanceInformation GatheringGitVersion ControlSource Code AnalysisSQL InjectionRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionJohn the RipperHashcatWindows SecurityNTLMHash AnalysishashcatUnicodeWeb ForensicsPythonText AnalysisOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackHex EncodingWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisMD5Rainbow TablesBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisBase64Web InspectionData EncodingHTML AnalysisQR Code AnalysisData ExtractionDigital ForensicsWeb HackingLogic FlawsToken ManipulationBase64 EncodingMemory ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 EncodingService DiscoveryDatabase ForensicsCLI UsageRedisJenkinsCI/CDDevOpsPentestAutomationSession ManagementAuthenticationPHPCryptanalysisClassical CryptoDNSPacket AnalysisBase64 DecodingLFIFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsMetadataHidden DataForensic ToolsLSBForensicsAudio AnalysisTransposition CipherRail FenceFlaskDebug ModeMemory AnalysisLogic FlawToken AuthenticationAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityAWS EC2Bypass TechniquesWeb ShellsPost ExploitationNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisShell CommandsHTTP Parameter ManipulationPDF SecurityDictionary AttacksDocument SecurityBrute Force AttacksJinja2Flask SecurityWeb Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTMD5 CrackingPassword AttacksHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingWindows RegistryPersistence AnalysisMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationIP SpoofingJinja2 ExploitationLDAP InjectionDirectory ServicesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDocument DatabasesSUID BinariesBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFrequency AnalysisEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationHTTP ProtocolRequest SmugglingLinuxCommand LineFile System NavigationHidden FilesgrepfindCSSMedia QueriesSource AnalysisDevToolsHash CrackingPassword AnalysisSecurity ToolsType JugglingGraphQLSchema IntrospectionInjectionSSHFile EnumerationCron JobsConfiguration AnalysisFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationDeobfuscationCode AnalysisCommand Line ToolsAttack DetectionWeb ExploitationPath TraversalCGICrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraMass AssignmentPassword ReuseLinux Privilege EscalationHost Header InjectionPassword Reset PoisoningPickle DeserializationRCEFile PermissionsMYSQLIApache TomcatWAR DeploymentDefault CredentialsSudoGITWEBHeadless CMSInformation DisclosureRevision HistoryToken AbuseAccess ControlSSTISSH Brute ForceWPDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperFile Upload BypassPHP SecurityWeb Shell ExploitationIP SPOOFINGFTPSecurity Through ObscurityView SourceBroken Access ControlHTMLNmapNmap CommandsTelnetPort ScanningCookie PoisoningSession TamperingView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Internal
Hard
Compromised 2
Hard
Broken Chain
Hard
RCE Playground
Medium
Infiltrator
Easy
Hex Hunt
Challenge
DNS Tunneling Detective
Challenge
Button Activator
Challenge
Cookie Forge
Challenge
File Include Bypass
Challenge
Corporate Directory Hunt
Challenge
Header Hijacker
Challenge
IDOR Explorer
Challenge
Race Condition Hunter
Challenge
Prototype Pollution Hunter
Challenge
WebDAV Explorer
Challenge
YAML Bomb
Challenge
Simple Directory Traversal
Challenge
Vigenere Stego Hunt
Challenge
SSRF Validator
Challenge
Backup Hunter
Challenge
Git Exposed
Challenge
Regex Bypass to SQLi
Challenge
Office Password Cracker
Challenge
Windows Password Cracker
Challenge
Shadow Cracker
Challenge
Phantom Text
Challenge
Token Trust
Challenge
XOR Reuse
Challenge
Stego Hunt
Challenge
Packet Pursuit
Challenge
Get the Password
Challenge
Binary Secrets
Challenge
Base64 Detective
Challenge
QR Code Quest
Challenge
API Breaker
Challenge
Memory Forensics
Challenge
Red is Dead
Challenge
Snapchat Exposed
Challenge
Session Switch
Challenge
Crypto Cipher
Challenge
DNS Exfil
Challenge
Corporate Breach
Challenge
Corporate Breach 2
Challenge
Blockchain Secrets
Challenge
PDF Trap
Challenge
Pixel Puzzler
Challenge
Sonic Cipher
Challenge
Rail Fence
Challenge
Flask Error
Challenge
API Logic Flaw
Challenge
JWT Bypass
Challenge
JWT Algo Confusion
Challenge
XXE Exposed
Challenge
SQL Injection
Challenge
JWT Claims Manipulation
Challenge
XSS Playground
Challenge
CSRF Bank Transfer
Challenge
URL Scanner
Challenge
File Upload Bypass
Challenge
NoSQL Injection
Challenge
LFI Log Poison
Challenge
Shell Command Scanner
Challenge
PDF Password Cracker
Challenge
Template Injection
Challenge
KeePass Breaker
Challenge
ZIP Cracker
Challenge
Corporate Backup Deserializer
Challenge
Git Secrets Hunter
Challenge
Admin Portal Breach
Challenge
Book Cipher Challenge
Challenge
WiFi Password Cracker
Challenge
Registry Hunter
Challenge
WEP Cracker
Challenge
IP Spoofing Admin
Challenge
Template Injector
Challenge
LDAP Injector
Challenge
Redis Cache Poisoner
Challenge
MongoDB Injector
Challenge
SUID Privilege Hunter
Challenge
Registry Hijacker
Challenge
Caesar Shift Decoder
Challenge
Email Header Forensics
Challenge
HTTP Smuggling
Challenge
Linux Fundamentals Practice
Challenge
Fine Print
Challenge
Crack SHA1 Hash
Challenge
Type Juggling Bypass
Challenge
GraphQL Gateway
Challenge
Scheduled Sabotage
Easy
Anonymous 2
Easy
Hack This Site
Challenge
SQL Injection Test
Challenge
Log Hunter
Challenge
Ping Pwn
Challenge
Auth Bypass
Challenge
Path Traversal
Challenge
Host Hijack
Medium
TechNova Infiltration
Medium
Pickle Jar
Medium
Alpwned
Medium
Query Quake
Medium
Hidden CMS Breach
Medium
Compromised 1
Medium
Traversed
Medium
AlVault
Medium
Matsudo
Medium
ClearDesk
Medium
FortiPy
Hard
WP Ultimate
Hard
Hack the Box
Hard
Beyond Echo
Medium
FiPloit
Easy
Cronpocalypse
Easy
Spoof!
Easy
Anonymous
Easy
Include me
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
The hacker mindset
Daily Hack Solved
- Same handle everywhere
+10 XP
1 day ago
Flag Found
- SSRF Attack: Steal Cloud Metadata Credentials
+200 XP
1 day ago
First Blood Root
- SSRF Attack: Steal Cloud Metadata Credentials
+80 XP
1 day ago
Flag Found
- SSRF Attack: Steal Cloud Metadata Credentials
+200 XP
1 day ago
Daily Hack Solved
- CloudTrail anomaly
+10 XP
2 days ago
Daily Hack Solved
- Vigenere then base64
+10 XP
3 days ago
Daily Hack Solved
- Find the hardcoded API key
+10 XP
5 days ago
Daily Hack Solved
- The GPG blob
+10 XP
6 days ago
Daily Hack Solved
- Hex back to text
+10 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Daily Hack Solved
- Flip the debug flag
+10 XP
1 week ago
Daily Hack Solved
- Read the shell history
+10 XP
1 week ago
Lesson Completed
+16 XP
1 week ago
Lesson Completed
+11 XP
1 week ago
Flag Found
- Internal
+350 XP
1 week ago
Flag Found
- Internal
+350 XP
1 week ago
Flag Found
- Compromised 2
+350 XP
1 week ago
Flag Found
- Compromised 2
+350 XP
1 week ago
Flag Found
- Broken Chain
+350 XP
1 week ago
Flag Found
- Broken Chain
+350 XP
1 week ago
Flag Found
- RCE Playground
+200 XP
1 week ago
Flag Found
- Infiltrator
+100 XP
1 week ago
Flag Found
- Infiltrator
+100 XP
1 week ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 week ago
Flag Found
- Hex Hunt
+50 XP
1 week ago
Flag Found
- DNS Tunneling Detective
+50 XP
1 week ago
Flag Found
- Button Activator
+50 XP
1 week ago
Flag Found
- Cookie Forge
+50 XP
1 week ago
Flag Found
- File Include Bypass
+50 XP
1 week ago
Flag Found
- Corporate Directory Hunt
+50 XP
1 week ago
Flag Found
- Header Hijacker
+50 XP
1 week ago
Flag Found
- IDOR Explorer
+50 XP
1 week ago
Flag Found
- Race Condition Hunter
+50 XP
1 week ago
Flag Found
- Prototype Pollution Hunter
+50 XP
1 week ago
Flag Found
- WebDAV Explorer
+50 XP
1 week ago
Flag Found
- YAML Bomb
+50 XP
1 week ago
Flag Found
- Simple Directory Traversal
+50 XP
1 week ago
Flag Found
- Vigenere Stego Hunt
+50 XP
1 week ago
Flag Found
- SSRF Validator
+50 XP
1 week ago
Flag Found
- Backup Hunter
+50 XP
1 week ago
Flag Found
- Git Exposed
+50 XP
1 week ago
Flag Found
- Regex Bypass to SQLi
+50 XP
1 week ago
Flag Found
- Office Password Cracker
+50 XP
1 week ago
Flag Found
- Windows Password Cracker
+50 XP
1 week ago
Flag Found
- Shadow Cracker
+50 XP
1 week ago
Flag Found
- Phantom Text
+50 XP
1 week ago
Flag Found
- Token Trust
+50 XP
1 week ago
Flag Found
- XOR Reuse
+50 XP
1 week ago
Daily Hack Solved
- Trace the port scan
+10 XP
1 week ago
Flag Found
- Stego Hunt
+50 XP
1 week ago