H3xCore Online
Expert
Live Ranking
#20
Best: #20
Total Points
581
Total Earned
Labs Completed
33
33 User • 10 Root
Modules
6
Validated
First Bloods
0
First to Complete
Best Streak
11
Days
Skills Acquired
Technical skills practiced through completed labs
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisWebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive SecurityWeb SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation GatheringGitVersion ControlSource Code AnalysisReconnaissanceCryptographyHash CrackingPassword AnalysisSecurity ToolsIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim ExploitationJavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevToolsPassword CrackingOffice SecurityHash ExtractionHashcatWindows SecurityNTLMHash AnalysisWeb Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationWeb EnumerationSSHLinux SecurityCVE ExploitationPath InjectionFile System SecurityInput ValidationPath ManipulationFile AccessSSRFURL ManipulationInternal Network AccessProtocol BypassIP SPOOFINGPHPLFIhashcatLinuxCommand LineFile System NavigationHidden FilesgrepfindSQL InjectionAuthentication BypassLinux Privilege EscalationFile PermissionsCommand InjectionLinux CapabilitiesReverse ShellSystem EnumerationNetwork ReconnaissanceApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsPenetration TestingAuthenticationRCELocal File InclusionFile Upload BypassPHP SecurityWeb Shell ExploitationLog AnalysisFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPHTMLClient-Side SecurityLearning PathWEBWebTELNETNetworkingWeb Services
Completed Modules
Educational modules successfully validated
HTTP Header Manipulation: IP Spoofing
3 modulesRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Remote Code Execution (RCE)
3 modulesShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Completed Labs & Challenges
Hands-on cybersecurity challenges successfully completed
Blockchain Secrets
Challenge
Blockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic Analysis
WebDAV Explorer
Challenge
WebDAV ExploitationFile UploadDirectory TraversalRemote File AccessHTTP MethodsWeb Server SecurityFile System Enumeration
Email Header Forensics
Challenge
Email ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital Investigation
ZIP Cracker
Challenge
ZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive Security
IP Spoofing Admin
Challenge
Web SecurityHTTP HeadersIP SpoofingAccess Control BypassInformation Gathering
Git Exposed
Challenge
GitVersion ControlSource Code AnalysisReconnaissanceWeb Security
Crack SHA1 Hash
Challenge
CryptographyHash CrackingPassword AnalysisSecurity Tools
Broken Chain
Hard
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
Get the Password
Challenge
JavaScriptMD5Rainbow TablesWeb DevelopmentBrowser DevTools
Office Password Cracker
Challenge
Password CrackingOffice SecurityHash ExtractionJohn the RipperHashcat
Windows Password Cracker
Challenge
Password CrackingWindows SecurityNTLMHashcatJohn the RipperHash Analysis
FortiPy
Hard
Web Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingPrivilege Escalation
TechNova Infiltration
Medium
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Simple Directory Traversal
Challenge
Directory TraversalPath InjectionFile System SecurityWeb SecurityInput ValidationPath ManipulationFile Access
SSRF Validator
Challenge
SSRFWeb SecurityURL ManipulationInternal Network AccessProtocol Bypass
Spoof!
Easy
IP SPOOFING
Include me
Easy
PHPLFI
Shadow Cracker
Challenge
Password CrackingLinux SecurityJohn the RipperhashcatCryptography
Linux Fundamentals Practice
Challenge
LinuxCommand LineFile System NavigationHidden Filesgrepfind
Alpwned
Medium
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
Internal
Hard
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
Compromised 1
Medium
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Matsudo
Medium
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Hidden CMS Breach
Medium
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
FiPloit
Easy
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Anonymous 2
Easy
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Anonymous
Easy
FTP
Secrets in Source 2
Very Easy
Web SecurityHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning Path
Hack the Cookie
Very Easy
WEBLearning Path
Hack the Login
Very Easy
WebAuthenticationClient-Side SecurityLearning Path
Nmap Lab 102
Very Easy
TELNETLearning Path
Secrets in Source
Very Easy
HTMLLearning Path
Onboarding Lab: Access and Flags
Very Easy
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Courses Progress
Your learning paths and modules