honkeyponkey
Grandmaster
Activity
38 active days in the last year
Less
More
Rank Progress
Grandmaster
✦ Legend ✦
12210 / 15784 XP
Achievements
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
Command InjectionInput Validation BypassRemote Code ExecutionFilter EvasionWeb SecurityLinuxSSHFile EnumerationCron JobsPrivilege EscalationConfiguration AnalysisJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsSteganographyImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisMD5Rainbow TablesBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisQR Code AnalysisData ExtractionDigital ForensicsAPI SecurityWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassMemory ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 EncodingNetwork ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageBase64Hex EncodingRedisJenkinsCI/CDDevOpsPentestAutomationSession ManagementAuthenticationPHPCryptanalysisClassical CryptoDNSPacket AnalysisData ExfiltrationBase64 DecodingLFIPassword CrackingAuthentication BypassDirectory TraversalPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsMetadataHidden DataForensic ToolsLSBForensicsPythonAudio AnalysisCryptographyTransposition CipherRail FenceFlaskDebug ModeMemory AnalysisPath TraversalCGIFile AccessInput ValidationLogic FlawParameter ManipulationLog AnalysisFile DiscoveryCommand Line ToolsHTTP ProtocolAttack DetectionSecurity AssessmentWeb ExploitationNetwork SecuritySQL InjectionDatabase SecurityJWTToken AuthenticationAlgorithm ConfusionRS256HS256Token ForgeryXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingClient-Side SecurityDOM ManipulationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsPost ExploitationNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationLocal File InclusionUser-Agent Log PoisoningApache SecuritySystem AdministrationPDF SecurityDictionary AttacksDocument SecurityBrute Force AttacksServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksClassical CiphersHistorical CryptanalysisJinja2 ExploitationWindows RegistryPersistence AnalysisMalware AnalysisLDAP InjectionDirectory ServicesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationMYSQLIRCEWeb InspectionHTML AnalysisDocument DatabasesSUID BinariesLinux SecurityBinary ExploitationWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFrequency AnalysisNetwork ForensicsDNS AnalysisTraffic AnalysisGraphQLSchema IntrospectionInjectionShell CommandsHTTP Parameter ManipulationFilter BypassApache AuthenticationHTTP HeadersSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoveryIDORRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationModern Web VulnerabilitiesWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityPolyalphabetic CiphersURL ManipulationInternal Network AccessProtocol BypassEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationRequest SmugglingType JugglingHash AnalysisZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityIP SpoofingInformation GatheringCookie ManipulationWiFi SecurityWPA CrackingWireless Penetration TestingDeobfuscationCode AnalysisWeb EnumerationReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiHash CrackingPassword AnalysisSecurity ToolsOffice SecurityHash ExtractionHashcatWindows SecurityNTLMLinux CapabilitiesReverse ShellSystem EnumerationCommand LineFile System NavigationHidden FilesgrepfindIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationSSTISSH Brute ForceDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBCVE ExploitationLinux Privilege EscalationFile PermissionsApache TomcatWAR DeploymentDefault CredentialsSudoFile Upload BypassPHP SecurityWeb Shell ExploitationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGFTPGITJWT ManipulationSSH ExploitationLog InjectionhashcatNmapNmap CommandsTelnetPort ScanningSecurity Through ObscurityView SourceInformation DisclosureBroken Access ControlHTMLCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsView Source Code
RCE Playground
Medium
Scheduled Sabotage
Easy
Cronpocalypse
Easy
Hex Hunt
Challenge
Stego Hunt
Challenge
Packet Pursuit
Challenge
Get the Password
Challenge
Binary Secrets
Challenge
QR Code Quest
Challenge
API Breaker
Challenge
Memory Forensics
Challenge
Red is Dead
Challenge
Snapchat Exposed
Challenge
Session Switch
Challenge
Crypto Cipher
Challenge
DNS Exfil
Challenge
Corporate Breach
Challenge
Corporate Breach 2
Challenge
Blockchain Secrets
Challenge
PDF Trap
Challenge
Pixel Puzzler
Challenge
Sonic Cipher
Challenge
Rail Fence
Challenge
Flask Error
Challenge
Path Traversal
Challenge
API Logic Flaw
Challenge
Log Hunter
Challenge
Ping Pwn
Challenge
Auth Bypass
Challenge
JWT Bypass
Challenge
JWT Algo Confusion
Challenge
XXE Exposed
Challenge
JWT Claims Manipulation
Challenge
XSS Playground
Challenge
CSRF Bank Transfer
Challenge
SQL Injection
Challenge
URL Scanner
Challenge
File Upload Bypass
Challenge
NoSQL Injection
Challenge
LFI Log Poison
Challenge
PDF Password Cracker
Challenge
Template Injection
Challenge
KeePass Breaker
Challenge
Corporate Backup Deserializer
Challenge
Git Secrets Hunter
Challenge
Admin Portal Breach
Challenge
Book Cipher Challenge
Challenge
Template Injector
Challenge
Registry Hunter
Challenge
LDAP Injector
Challenge
Redis Cache Poisoner
Challenge
Query Quake
Medium
Base64 Detective
Challenge
MongoDB Injector
Challenge
SUID Privilege Hunter
Challenge
WEP Cracker
Challenge
Registry Hijacker
Challenge
Caesar Shift Decoder
Challenge
DNS Tunneling Detective
Challenge
GraphQL Gateway
Challenge
Shell Command Scanner
Challenge
File Include Bypass
Challenge
Header Hijacker
Challenge
Corporate Directory Hunt
Challenge
IDOR Explorer
Challenge
Race Condition Hunter
Challenge
Prototype Pollution Hunter
Challenge
WebDAV Explorer
Challenge
YAML Bomb
Challenge
Simple Directory Traversal
Challenge
Vigenere Stego Hunt
Challenge
SSRF Validator
Challenge
Email Header Forensics
Challenge
HTTP Smuggling
Challenge
Type Juggling Bypass
Challenge
ZIP Cracker
Challenge
Button Activator
Challenge
IP Spoofing Admin
Challenge
Cookie Forge
Challenge
WiFi Password Cracker
Challenge
Hack This Site
Challenge
SQL Injection Test
Challenge
Backup Hunter
Challenge
Git Exposed
Challenge
Regex Bypass to SQLi
Challenge
Crack SHA1 Hash
Challenge
Office Password Cracker
Challenge
Windows Password Cracker
Challenge
Internal
Hard
Linux Fundamentals Practice
Challenge
Broken Chain
Hard
FortiPy
Hard
Hack the Box
Hard
TechNova Infiltration
Medium
Alpwned
Medium
Compromised 1
Medium
Matsudo
Medium
Beyond Echo
Medium
Hidden CMS Breach
Medium
FiPloit
Easy
Anonymous 2
Easy
Spoof!
Easy
Anonymous
Easy
Traversed
Medium
Infiltrator
Easy
Shadow Cracker
Challenge
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Include me
Easy
Rainbow tables
Wireless cracking
PDF cracking
Linux hash cracking
Office Documents cracking
ZIP cracking
Brute force attacks
Password fundamentals
Dictionary attacks
Windows hash cracking
Active for 3 days
2 months ago
Task Completed
- AlVault
4 months ago
Task Completed
- AlVault
4 months ago
Task Completed
- AlVault
4 months ago
Task Completed
- AlVault
4 months ago
Task Completed
- AlVault
4 months ago
Task Completed
- AlVault
4 months ago
Flag Found
- RCE Playground
+200 XP
4 months ago
Flag Found
- Scheduled Sabotage
+100 XP
4 months ago
Flag Found
- Scheduled Sabotage
+100 XP
4 months ago
Flag Found
- Cronpocalypse
+100 XP
4 months ago
Flag Found
- Cronpocalypse
+100 XP
4 months ago
Active for 1 days
4 months ago
Chapter Completed
- Linux hash cracking
+1 XP
4 months ago
Chapter Completed
- Windows hash cracking
+1 XP
4 months ago
Chapter Completed
- Wireless cracking
+1 XP
4 months ago
Chapter Completed
- Brute force attacks
+1 XP
4 months ago
Chapter Completed
- Office Documents cracking
+1 XP
4 months ago
Chapter Completed
- ZIP cracking
+1 XP
4 months ago
Chapter Completed
- PDF cracking
+1 XP
4 months ago
Chapter Completed
- Rainbow tables
+1 XP
4 months ago
Flag Found
- Hex Hunt
+50 XP
4 months ago
Flag Found
- Stego Hunt
+50 XP
4 months ago
Flag Found
- Packet Pursuit
+50 XP
4 months ago
Flag Found
- Get the Password
+50 XP
4 months ago
Flag Found
- Binary Secrets
+50 XP
4 months ago
Flag Found
- QR Code Quest
+50 XP
4 months ago
Flag Found
- API Breaker
+50 XP
4 months ago
Flag Found
- Memory Forensics
+50 XP
4 months ago
Flag Found
- Red is Dead
+50 XP
4 months ago
Flag Found
- Snapchat Exposed
+50 XP
4 months ago
Flag Found
- Session Switch
+50 XP
4 months ago
Flag Found
- Crypto Cipher
+50 XP
4 months ago
Flag Found
- DNS Exfil
+50 XP
4 months ago
Flag Found
- Corporate Breach
+50 XP
4 months ago
Flag Found
- Corporate Breach 2
+50 XP
4 months ago
Flag Found
- Blockchain Secrets
+50 XP
4 months ago
Flag Found
- PDF Trap
+50 XP
4 months ago
Flag Found
- Pixel Puzzler
+50 XP
4 months ago
Flag Found
- Sonic Cipher
+50 XP
4 months ago
Flag Found
- Rail Fence
+50 XP
4 months ago
Flag Found
- Flask Error
+50 XP
4 months ago
Flag Found
- Path Traversal
+50 XP
4 months ago
Flag Found
- API Logic Flaw
+50 XP
4 months ago
Flag Found
- Log Hunter
+50 XP
4 months ago
Flag Found
- Ping Pwn
+50 XP
4 months ago
Flag Found
- Compromised 2
+350 XP
4 months ago
Task Completed
- Compromised 2
4 months ago