darkbb
✦ Legend ✦
Online
...
Activity
46 active days in the last year
Less
More
Rank Progress
✦ Legend ✦
Max Rank
Achievements
Streak Starter
Streak Master
Streak Legend
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
Pro Member
SSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityWeb SecurityAWS EC2Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalApache SecuritySystem AdministrationLog AnalysisFile UploadBypass TechniquesPHPWeb ShellsInput ValidationSocial EngineeringPost ExploitationPassword CrackingCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReuseCommand InjectionShell CommandsHTTP Parameter ManipulationSecurity AssessmentServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPrivilege EscalationPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation GatheringJinja2 ExploitationLDAP InjectionAuthentication BypassDirectory ServicesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationJWTCookie ManipulationSUID BinariesLinux SecurityBinary ExploitationNoSQL InjectionMongoDBDocument DatabasesSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability AssessmentVisibility ControlsSecurity TestingOperator ExploitationGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryPDF SecurityDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationGraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjectionJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityFilter BypassApache AuthenticationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoveryWeb DevelopmentHexadecimalSteganographyImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisRainbow TablesBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisBase64Web InspectionData EncodingHTML AnalysisQR Code AnalysisData ExtractionCryptanalysisClassical CryptoPattern RecognitionMemory ForensicsIncident ResponseTool UsageData RecoveryROT13 EncodingFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsMetadataHidden DataForensic ToolsLSBPythonAudio AnalysisCryptographyTransposition CipherRail FenceKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsDNSPacket AnalysisData ExfiltrationBase64 DecodingZIP Password CrackingfcrackzipBrute ForceArchive SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksClassical CiphersHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingWindows RegistryPersistence AnalysisMalware AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationFrequency AnalysisSecurity BypassClient-Side ManipulationIDORParameter ManipulationRace ConditionsTiming AttacksConcurrent ExploitationWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityPath ManipulationFile AccessURL ManipulationInternal Network AccessProtocol BypassPrompt InjectionLLM SecurityAI Red TeamingJailbreakOWASP LLM Top 10Guardrail BypassSystem Prompt LeakageExcessive AgencyNetwork ForensicsDNS AnalysisTraffic AnalysisDeobfuscationCode AnalysisEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationPolyalphabetic CiphersRequest SmugglingPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesType JugglingHash AnalysisGitVersion ControlReconnaissanceWeb EnumerationPassword AnalysisSecurity ToolsRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatCSSMedia QueriesWeb ForensicsSource AnalysisDevToolsUnicodeText AnalysisLinuxCommand LineFile System NavigationHidden FilesgrepfindFile Upload BypassPHP SecurityWeb Shell ExploitationOAuth 2.0Web ReconConfiguration ExploitsSSHSudoNetwork ReconnaissanceLinux CapabilitiesReverse ShellSystem EnumerationAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationFilter EvasionXORKnown-Plaintext AttackHex EncodingFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationFile EnumerationCron JobsConfiguration AnalysisWPJWT ManipulationSSH ExploitationLog InjectionMass AssignmentLinux Privilege EscalationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBSSTISSH Brute ForceApache TomcatWAR DeploymentDefault CredentialsMYSQLIRCECloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftMetadata Service AbuseAPI EnumerationGITWeb ExploitationHeadless CMSInformation DisclosureRevision HistoryToken AbuseWEBCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraHost Header InjectionPassword Reset PoisoningPickle DeserializationFile PermissionsAuthenticationPath TraversalAccess ControlIP SPOOFINGFTPLFICookie PoisoningSession TamperingBase64 EncodingSecurity Through ObscurityView SourceBroken Access ControlHTMLNmapNmap CommandsTelnetPort ScanningView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
URL Scanner
Challenge
LFI Log Poison
Challenge
File Upload Bypass
Challenge
Shell Command Scanner
Challenge
Template Injection
Challenge
Corporate Backup Deserializer
Challenge
IP Spoofing Admin
Challenge
Template Injector
Challenge
LDAP Injector
Challenge
Redis Cache Poisoner
Challenge
Cookie Forge
Challenge
SUID Privilege Hunter
Challenge
MongoDB Injector
Challenge
SQL Injection
Challenge
NoSQL Injection
Challenge
Git Secrets Hunter
Challenge
PDF Password Cracker
Challenge
Registry Hijacker
Challenge
GraphQL Gateway
Challenge
Button Activator
Challenge
File Include Bypass
Challenge
Corporate Directory Hunt
Challenge
Hex Hunt
Challenge
Stego Hunt
Challenge
Packet Pursuit
Easy
Get the Password
Challenge
Binary Secrets
Challenge
Base64 Detective
Challenge
QR Code Quest
Challenge
Crypto Cipher
Challenge
Memory Forensics
Challenge
Log Hunter
Challenge
Blockchain Secrets
Challenge
PDF Trap
Challenge
Pixel Puzzler
Challenge
Sonic Cipher
Challenge
Rail Fence
Challenge
KeePass Breaker
Challenge
DNS Exfil
Challenge
ZIP Cracker
Challenge
Admin Portal Breach
Challenge
Book Cipher Challenge
Challenge
WiFi Password Cracker
Challenge
Registry Hunter
Challenge
WEP Cracker
Challenge
Caesar Shift Decoder
Challenge
Header Hijacker
Challenge
IDOR Explorer
Challenge
Race Condition Hunter
Challenge
WebDAV Explorer
Challenge
YAML Bomb
Challenge
Simple Directory Traversal
Challenge
SQL Injection Test
Challenge
SSRF Validator
Challenge
DNS Tunneling Detective
Challenge
Hack This Site
Challenge
Email Header Forensics
Challenge
Vigenere Stego Hunt
Challenge
HTTP Smuggling
Challenge
Prototype Pollution Hunter
Challenge
Type Juggling Bypass
Challenge
Git Exposed
Challenge
Backup Hunter
Challenge
Crack SHA1 Hash
Challenge
Regex Bypass to SQLi
Challenge
Office Password Cracker
Challenge
Windows Password Cracker
Challenge
Shadow Cracker
Challenge
Fine Print
Challenge
Phantom Text
Challenge
Linux Fundamentals Practice
Challenge
FiPloit
Easy
Token Trust
Challenge
Matsudo
Medium
Internal
Hard
Compromised 2
Hard
RCE Playground
Medium
XOR Reuse
Challenge
Anonymous 2
Easy
Broken Chain
Hard
Scheduled Sabotage
Easy
WP Ultimate
Hard
Infiltrator
Easy
Hack the Box
Hard
FortiPy
Hard
Compromised 1
Medium
Query Quake
Medium
Traversed
Medium
AlVault
Medium
Beyond Echo
Medium
Host Hijack
Medium
TechNova Infiltration
Medium
Pickle Jar
Medium
Alpwned
Medium
Hidden CMS Breach
Medium
ClearDesk
Medium
Cronpocalypse
Easy
Spoof!
Easy
Anonymous
Easy
Include me
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Appended data and carving
Steganography foundations
Metadata and EXIF secrets
Steghide and passphrase cracking
LSB image steganography
YARA and Sigma detections
Threat hunting foundations
MITRE ATT&CK hunting
Threat intelligence fundamentals
The hunt program
IOCs, feeds and platforms
Endpoint and network hunting
The hunt loop
Active for 1 days
15 hours ago
Daily Hack Solved
- The cert that named it
+10 XP
1 day ago
Flag Found
- URL Scanner
+50 XP
2 days ago
Daily Hack Solved
- Where the link really goes
+10 XP
2 days ago
Flag Found
- LFI Log Poison
+50 XP
3 days ago
Daily Hack Solved
- The allowlist that isn't
+10 XP
3 days ago
Daily Hack Solved
- Three keys, one account
+10 XP
4 days ago
Daily Hack Solved
- The canary build
+10 XP
5 days ago
Daily Hack Solved
- The gateway that appeared
+10 XP
1 week ago
Flag Found
- File Upload Bypass
+50 XP
1 week ago
Flag Found
- Password Cracking - Custom Wordlist Attack
+100 XP
1 week ago
Flag Found
- Password Cracking - Custom Wordlist Attack
+100 XP
1 week ago
Daily Hack Solved
- The click you never made
+10 XP
1 week ago
Active for 1 days
1 week ago
Flag Found
- Shell Command Scanner
+50 XP
1 week ago
Flag Found
- Template Injection
+50 XP
1 week ago
Flag Found
- Corporate Backup Deserializer
+50 XP
1 week ago
Flag Found
- IP Spoofing Admin
+50 XP
1 week ago
Flag Found
- Template Injector
+50 XP
1 week ago
Chapter Completed
- The hunt program
+1 XP
1 week ago
Chapter Completed
- YARA and Sigma detections
+1 XP
1 week ago
Chapter Completed
- IOCs, feeds and platforms
+1 XP
1 week ago
Chapter Completed
- Threat intelligence fundamentals
+1 XP
1 week ago
Chapter Completed
- Endpoint and network hunting
+1 XP
1 week ago
Chapter Completed
- MITRE ATT&CK hunting
+1 XP
1 week ago
Chapter Completed
- The hunt loop
+1 XP
1 week ago
Chapter Completed
- Threat hunting foundations
+1 XP
1 week ago
Flag Found
- LDAP Injector
+50 XP
1 week ago
Flag Found
- Redis Cache Poisoner
+50 XP
1 week ago
Flag Found
- Cookie Forge
+50 XP
1 week ago
Flag Found
- SUID Privilege Hunter
+50 XP
1 week ago
Flag Found
- MongoDB Injector
+50 XP
1 week ago
Daily Hack Solved
- Count the layers
+10 XP
1 week ago
Flag Found
- SQL Injection
+50 XP
1 week ago
Flag Found
- NoSQL Injection
+50 XP
1 week ago
Flag Found
- Git Secrets Hunter
+50 XP
1 week ago
Flag Found
- PDF Password Cracker
+50 XP
1 week ago
Flag Found
- Registry Hijacker
+50 XP
1 week ago
Flag Found
- GraphQL Gateway
+50 XP
1 week ago
Flag Found
- Button Activator
+50 XP
1 week ago
Daily Hack Solved
- The total you do not see
+10 XP
1 week ago
Flag Found
- File Include Bypass
+50 XP
1 week ago
Flag Found
- Corporate Directory Hunt
+50 XP
1 week ago
Flag Found
- Hex Hunt
+50 XP
1 week ago
Flag Found
- Stego Hunt
+50 XP
1 week ago
Flag Found
- Packet Pursuit
+100 XP
1 week ago
Flag Found
- Get the Password
+50 XP
1 week ago
Flag Found
- Binary Secrets
+50 XP
1 week ago
Flag Found
- Base64 Detective
+50 XP
1 week ago
Flag Found
- QR Code Quest
+50 XP
1 week ago