H3xCore
Grandmaster
#break systems legally
Activity
119 active days in the last year
Less
More
Rank Progress
Grandmaster
✦ Legend ✦
13233 / 15784 XP
Achievements
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Writer
Top 10
Pro Member
Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisAPI SecurityWeb HackingLogic FlawsPrivilege EscalationToken ManipulationBase64 EncodingAuthorization BypassQR Code AnalysisImage AnalysisData ExtractionSteganographyDigital ForensicsWebCTF BasicsBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisCryptanalysisClassical CryptoPattern RecognitionLocal File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalWeb SecurityApache SecuritySystem AdministrationLog AnalysisSession ManagementAuthenticationPHPCryptographyTransposition CipherRail FencePythonPDF ForensicsMetadataHidden DataForensic ToolsLFIPath ManipulationFile InclusionCommand InjectionWeb ExploitationNetwork SecurityPath TraversalCGIFile AccessInput ValidationAudio AnalysisLSBForensicsShell CommandsHTTP Parameter ManipulationSecurity AssessmentLogic FlawAuthentication BypassParameter ManipulationSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationVulnerability AssessmentSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2Python PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityWindows RegistryPersistence AnalysisBase64 DecodingMalware AnalysisClient-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTServer-Side Template InjectionFlask SecurityJinja2 ExploitationXSSCross-Site ScriptingStored XSSSession HijackingJavaScriptDOM ManipulationWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingPacket AnalysisNoSQL InjectionMongoDBDocument DatabasesLDAP InjectionDirectory ServicesDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoveryCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationClassical CiphersFrequency AnalysisHTTP HeadersSecurity BypassClient-Side ManipulationIDORRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRegex BypassSQLiteUNION-Based SQLiOAuth 2.0JWTWeb ReconConfiguration ExploitsXORKnown-Plaintext AttackType JugglingHash AnalysisDeobfuscationBrowser DevToolsCode AnalysisMD5Hash CrackingPassword CrackingJohn the Ripperhashidhash-identifierCrackStationWordlist AttackPre-SecurityLinuxgrepfindpipeswcwhoamichmodpermissionsrwxstatcattouchechocpmvrmTerminalpwdlscdFilesystemHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbuseWEBPickle DeserializationRCENetwork AnalysisDNSData ExfiltrationAccess ControlWeb InspectionHTML AnalysisHost Header InjectionPassword Reset PoisoningGITFilter EvasionCSSMedia QueriesWeb ForensicsSource AnalysisDevToolsUnicodeText AnalysisPDF SecurityDocument SecurityBrute Force AttacksFlaskDebug ModeMemory AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationJWT ManipulationSSH ExploitationLog InjectionLinux SecuritySSHFile EnumerationCron JobsConfiguration AnalysisFilter BypassApache AuthenticationWeb DevelopmentHexadecimalHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisMYSQLIDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationZIP Password CrackingfcrackzipBrute ForceArchive SecurityIP SpoofingAccess Control BypassInformation GatheringGitVersion ControlReconnaissancePassword AnalysisSecurity ToolsIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationRainbow TablesOffice SecurityHash ExtractionHashcatWindows SecurityNTLMSSTISSH Brute ForceWeb EnumerationCVE ExploitationPath InjectionFile System SecurityURL ManipulationInternal Network AccessProtocol BypassIP SPOOFINGhashcatCommand LineFile System NavigationHidden FilesLinux Privilege EscalationFile PermissionsLinux CapabilitiesReverse ShellSystem EnumerationApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsFile Upload BypassPHP SecurityWeb Shell ExploitationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPSecurity Through ObscurityView SourceBroken Access ControlHTMLCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning PathNmapNmap CommandsTelnetPort ScanningView Source CodeCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Red is Dead
Challenge
API Breaker
Challenge
QR Code Quest
Challenge
Stego Hunt
Challenge
Binary Secrets
Challenge
Crypto Cipher
Challenge
LFI Log Poison
Challenge
Session Switch
Challenge
Rail Fence
Challenge
PDF Trap
Challenge
Corporate Breach 2
Challenge
Ping Pwn
Challenge
Path Traversal
Challenge
Sonic Cipher
Challenge
Shell Command Scanner
Challenge
API Logic Flaw
Challenge
SQL Injection
Challenge
URL Scanner
Challenge
Corporate Backup Deserializer
Challenge
Registry Hunter
Challenge
Admin Portal Breach
Challenge
Git Secrets Hunter
Challenge
Template Injector
Challenge
XSS Playground
Challenge
WiFi Password Cracker
Challenge
MongoDB Injector
Challenge
LDAP Injector
Challenge
Corporate Directory Hunt
Challenge
Redis Cache Poisoner
Challenge
Registry Hijacker
Challenge
Caesar Shift Decoder
Challenge
Header Hijacker
Challenge
IDOR Explorer
Challenge
Race Condition Hunter
Challenge
Prototype Pollution Hunter
Challenge
Regex Bypass to SQLi
Challenge
Token Trust
Challenge
XOR Reuse
Challenge
Type Juggling Bypass
Challenge
Hack This Site
Challenge
AlVault
Medium
Pickle Jar
Medium
DNS Exfil
Challenge
ClearDesk
Medium
Base64 Detective
Challenge
Host Hijack
Medium
Traversed
Medium
RCE Playground
Medium
SQL Injection Test
Challenge
Fine Print
Challenge
Phantom Text
Challenge
PDF Password Cracker
Challenge
Flask Error
Challenge
WEP Cracker
Challenge
Infiltrator
Easy
Scheduled Sabotage
Easy
File Include Bypass
Challenge
Button Activator
Challenge
Hex Hunt
Challenge
Beyond Echo
Medium
Cronpocalypse
Easy
HTTP Smuggling
Challenge
Query Quake
Medium
Hack the Box
Hard
Blockchain Secrets
Challenge
WebDAV Explorer
Challenge
Email Header Forensics
Challenge
ZIP Cracker
Challenge
IP Spoofing Admin
Challenge
Git Exposed
Challenge
Crack SHA1 Hash
Challenge
Broken Chain
Hard
Get the Password
Challenge
Office Password Cracker
Challenge
Windows Password Cracker
Challenge
FortiPy
Hard
TechNova Infiltration
Medium
Simple Directory Traversal
Challenge
SSRF Validator
Challenge
Spoof!
Easy
Include me
Easy
Shadow Cracker
Challenge
Linux Fundamentals Practice
Challenge
Alpwned
Medium
Internal
Hard
Compromised 1
Medium
Matsudo
Medium
Hidden CMS Breach
Medium
FiPloit
Easy
Anonymous 2
Easy
Anonymous
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Bug Bounty
10
Quick wins
Hunting setup
Automation
Bug bounty basics
Hunting methodology
Avoiding duplicates
Bug bounty career
Recon fundamentals
Report writing
Program selection
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Active for 2 days
4 days ago
Task Completed
- Pwnify - Web Application Penetration Testing
5 days ago
Active for 12 days
1 week ago
Flag Found
- Red is Dead
+50 XP
3 weeks ago
Flag Found
- API Breaker
+50 XP
3 weeks ago
Flag Found
- QR Code Quest
+50 XP
3 weeks ago
Flag Found
- Stego Hunt
+50 XP
3 weeks ago
Flag Found
- Binary Secrets
+50 XP
3 weeks ago
Flag Found
- Crypto Cipher
+50 XP
3 weeks ago
Flag Found
- LFI Log Poison
+50 XP
3 weeks ago
Flag Found
- Session Switch
+50 XP
3 weeks ago
Flag Found
- Rail Fence
+50 XP
3 weeks ago
Flag Found
- PDF Trap
+50 XP
3 weeks ago
Flag Found
- Corporate Breach 2
+50 XP
3 weeks ago
Flag Found
- Ping Pwn
+50 XP
3 weeks ago
Flag Found
- Path Traversal
+50 XP
3 weeks ago
Flag Found
- Sonic Cipher
+50 XP
3 weeks ago
Flag Found
- Shell Command Scanner
+50 XP
3 weeks ago
Flag Found
- API Logic Flaw
+50 XP
3 weeks ago
Flag Found
- SQL Injection
+50 XP
3 weeks ago
Flag Found
- URL Scanner
+50 XP
3 weeks ago
Flag Found
- Corporate Backup Deserializer
+50 XP
3 weeks ago
Flag Found
- Registry Hunter
+50 XP
3 weeks ago
Flag Found
- Admin Portal Breach
+50 XP
3 weeks ago
Flag Found
- Git Secrets Hunter
+50 XP
3 weeks ago
Flag Found
- Template Injector
+50 XP
3 weeks ago
Flag Found
- XSS Playground
+50 XP
3 weeks ago
Flag Found
- WiFi Password Cracker
+50 XP
3 weeks ago
Flag Found
- MongoDB Injector
+50 XP
3 weeks ago
Flag Found
- LDAP Injector
+50 XP
3 weeks ago
Flag Found
- Corporate Directory Hunt
+50 XP
3 weeks ago
Flag Found
- Redis Cache Poisoner
+50 XP
3 weeks ago
Flag Found
- Registry Hijacker
+50 XP
3 weeks ago
Flag Found
- Caesar Shift Decoder
+50 XP
3 weeks ago
Flag Found
- Header Hijacker
+50 XP
3 weeks ago
Flag Found
- IDOR Explorer
+50 XP
3 weeks ago
Flag Found
- Race Condition Hunter
+50 XP
3 weeks ago
Flag Found
- Prototype Pollution Hunter
+50 XP
3 weeks ago