Ichiko
✦ Legend ✦
I break systems legally and rank in the top 70 worldwide. Senior hacker from the Philippines with 23 flags and counting.
Activity
118 active days in the last year
Less
More
Rank Progress
✦ Legend ✦
Max Rank
Achievements
Streak Starter
Streak Master
Streak Legend
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
Password CrackingCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReuseSSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationJWTWeb SecurityToken AuthenticationCryptographyAlgorithm ConfusionRS256HS256Token ForgeryNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisCommand InjectionShell CommandsSystem AdministrationHTTP Parameter ManipulationSecurity AssessmentWireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol ExploitationCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementReverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraSession ManagementAuthenticationPHPLFIAuthentication BypassDirectory TraversalQR Code AnalysisImage AnalysisData ExtractionSteganographyDigital ForensicsDNSData ExfiltrationBase64 DecodingCryptanalysisClassical CryptoPattern RecognitionData EncodingJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsJenkinsCI/CDDevOpsPentestAutomationRainbow TablesNetwork ReconnaissanceService DiscoveryDatabase ForensicsCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisWeb InspectionHTML AnalysisAPI SecurityWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassPath ManipulationFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLSBForensicsPythonAudio AnalysisTransposition CipherRail FenceFlaskDebug ModeMemory AnalysisPath TraversalCGIFile AccessInput ValidationLogic FlawParameter ManipulationWeb ExploitationNetwork SecuritySQL InjectionDatabase SecurityXSSCross-Site ScriptingStored XSSSession HijackingClient-Side SecurityDOM ManipulationClaims ManipulationTime-Based AttacksSignature CrackingLocal File InclusionUser-Agent Log PoisoningRemote Code ExecutionApache SecurityLog AnalysisXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File UploadBypass TechniquesWeb ShellsPost ExploitationNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationPDF SecurityDictionary AttacksDocument SecurityBrute Force AttacksServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsWebCTF BasicsMemory ForensicsTool UsageROT13 EncodingHex EditorsData StructuresMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksClassical CiphersHistorical CryptanalysisWindows RegistryPersistence AnalysisMalware AnalysisHTTP HeadersIP SpoofingInformation GatheringJinja2 ExploitationFile DiscoveryCommand Line ToolsHTTP ProtocolAttack DetectionLDAP InjectionDirectory ServicesEnterprise SecurityCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationDocument DatabasesZIP Password CrackingfcrackzipBrute ForceArchive SecurityPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksWiFi SecurityWPA CrackingWireless Penetration TestingDeobfuscationCode AnalysisGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoverySUID BinariesLinux SecurityBinary ExploitationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationFrequency AnalysisNetwork ForensicsDNS AnalysisTraffic AnalysisGraphQLSchema IntrospectionInjectionCookie ManipulationFilter BypassApache AuthenticationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity BypassClient-Side ManipulationIDORRace ConditionsTiming AttacksConcurrent ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityPolyalphabetic CiphersURL ManipulationInternal Network AccessProtocol BypassEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationRequest SmugglingPassword AnalysisSecurity ToolsType JugglingHash AnalysisWeb EnumerationReconnaissanceGitVersion ControlRegex BypassSQLiteUNION-Based SQLiOffice SecurityHash ExtractionHashcatWindows SecurityNTLMhashcatLinuxCommand LineFile System NavigationHidden FilesgrepfindUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsXORKnown-Plaintext AttackIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationWPAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationSSHFilter EvasionApache TomcatWAR DeploymentDefault CredentialsSudoLinux CapabilitiesReverse ShellSystem EnumerationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationMass AssignmentLinux Privilege EscalationMYSQLIRCEJWT ManipulationSSH ExploitationLog InjectionFile EnumerationCron JobsConfiguration AnalysisHeadless CMSInformation DisclosureRevision HistoryToken AbuseSSTISSH Brute ForcePickle DeserializationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperWEBFile PermissionsHost Header InjectionPassword Reset PoisoningGITAccess ControlIP SPOOFINGFTPFile Upload BypassPHP SecurityWeb Shell ExploitationView Source CodeHTMLBroken Access ControlCookie PoisoningSession TamperingNmapNmap CommandsTelnetPort ScanningSecurity Through ObscurityView SourceBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
JWT Bypass
Challenge
JWT Algo Confusion
Challenge
Packet Pursuit
Easy
Shell Command Scanner
Challenge
WEP Cracker
Challenge
CSRF Bank Transfer
Challenge
Session Switch
Challenge
Corporate Breach
Challenge
QR Code Quest
Challenge
DNS Exfil
Challenge
Crypto Cipher
Challenge
Hex Hunt
Challenge
Snapchat Exposed
Challenge
Get the Password
Challenge
Red is Dead
Challenge
Base64 Detective
Challenge
API Breaker
Challenge
Corporate Breach 2
Challenge
Blockchain Secrets
Challenge
PDF Trap
Challenge
Pixel Puzzler
Challenge
Sonic Cipher
Challenge
Rail Fence
Challenge
Flask Error
Challenge
Path Traversal
Challenge
API Logic Flaw
Challenge
Ping Pwn
Challenge
Auth Bypass
Challenge
XSS Playground
Challenge
JWT Claims Manipulation
Challenge
LFI Log Poison
Challenge
XXE Exposed
Challenge
SQL Injection
Challenge
URL Scanner
Challenge
File Upload Bypass
Challenge
NoSQL Injection
Challenge
PDF Password Cracker
Challenge
Template Injection
Challenge
KeePass Breaker
Challenge
Stego Hunt
Challenge
Memory Forensics
Challenge
Binary Secrets
Challenge
Admin Portal Breach
Challenge
Book Cipher Challenge
Challenge
Registry Hunter
Challenge
IP Spoofing Admin
Challenge
Template Injector
Challenge
Log Hunter
Challenge
LDAP Injector
Challenge
Redis Cache Poisoner
Challenge
MongoDB Injector
Challenge
ZIP Cracker
Challenge
Corporate Backup Deserializer
Challenge
WiFi Password Cracker
Challenge
Hack This Site
Challenge
Git Secrets Hunter
Challenge
SUID Privilege Hunter
Challenge
Registry Hijacker
Challenge
Caesar Shift Decoder
Challenge
DNS Tunneling Detective
Challenge
GraphQL Gateway
Challenge
Button Activator
Challenge
Cookie Forge
Challenge
File Include Bypass
Challenge
Corporate Directory Hunt
Challenge
Header Hijacker
Challenge
IDOR Explorer
Challenge
Race Condition Hunter
Challenge
Prototype Pollution Hunter
Challenge
WebDAV Explorer
Challenge
YAML Bomb
Challenge
Simple Directory Traversal
Challenge
Vigenere Stego Hunt
Challenge
SSRF Validator
Challenge
Email Header Forensics
Challenge
HTTP Smuggling
Challenge
Crack SHA1 Hash
Challenge
Type Juggling Bypass
Challenge
Backup Hunter
Challenge
Git Exposed
Challenge
Regex Bypass to SQLi
Challenge
Office Password Cracker
Challenge
Windows Password Cracker
Challenge
Shadow Cracker
Challenge
Linux Fundamentals Practice
Challenge
SQL Injection Test
Challenge
Phantom Text
Challenge
Fine Print
Challenge
Token Trust
Challenge
XOR Reuse
Challenge
Broken Chain
Hard
WP Ultimate
Hard
Compromised 2
Hard
TechNova Infiltration
Medium
RCE Playground
Medium
Compromised 1
Medium
Matsudo
Medium
Internal
Hard
Anonymous 2
Easy
Query Quake
Medium
Infiltrator
Easy
Scheduled Sabotage
Easy
FortiPy
Hard
Pickle Jar
Medium
Hack the Box
Hard
AlVault
Medium
Alpwned
Medium
Hidden CMS Breach
Medium
Host Hijack
Medium
Traversed
Medium
ClearDesk
Medium
Beyond Echo
Medium
Cronpocalypse
Easy
Spoof!
Easy
Anonymous
Easy
FiPloit
Easy
Include me
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Pipes and data pipelines
Users, groups, and permissions
Filesystem navigation
Process management
Searching for what matters
Reading and manipulating files
Your first terminal session
Network commands
The hacker mindset
Streak Frozen
1 day ago
Daily Hack Solved
- Write it back
+10 XP
1 day ago
Daily Hack Solved
- Approved by somebody else
+10 XP
3 days ago
Daily Hack Solved
- The trigger that changed everything
+10 XP
3 days ago
Daily Hack Solved
- Two victims, one supplier
+10 XP
4 days ago
Daily Hack Solved
- The light that talks
+10 XP
6 days ago
Daily Hack Solved
- One page of six
+10 XP
1 week ago
Flag Found
- Password Cracking - Custom Wordlist Attack
+100 XP
1 week ago
Flag Found
- Password Cracking - Custom Wordlist Attack
+100 XP
1 week ago
Daily Hack Solved
- Bigger than it says
+10 XP
1 week ago
Daily Hack Solved
- The fill that was arranged
+10 XP
1 week ago
Daily Hack Solved
- The sender nobody owns
+10 XP
1 week ago
Daily Hack Solved
- The invite that made an owner
+10 XP
1 week ago
Daily Hack Solved
- Who signs your token
+10 XP
1 week ago
Daily Hack Solved
- The cert that named it
+10 XP
1 week ago
Daily Hack Solved
- Where the link really goes
+10 XP
1 week ago
Daily Hack Solved
- The allowlist that isn't
+10 XP
2 weeks ago
Daily Hack Solved
- Three keys, one account
+10 XP
2 weeks ago
Daily Hack Solved
- The canary build
+10 XP
2 weeks ago
Daily Hack Solved
- The gateway that appeared
+10 XP
2 weeks ago
Daily Hack Solved
- The click you never made
+10 XP
2 weeks ago
Active for 2 days
2 weeks ago
Daily Hack Solved
- Count the layers
+10 XP
3 weeks ago
Daily Hack Solved
- The total you do not see
+10 XP
3 weeks ago
Daily Hack Solved
- How long does it live
+10 XP
3 weeks ago
Daily Hack Solved
- The alibi that breaks
+10 XP
3 weeks ago
Daily Hack Solved
- Recover the XOR key
+10 XP
3 weeks ago
Daily Hack Solved
- Find the safe one
+10 XP
3 weeks ago
Daily Hack Solved
- Repair the magic bytes
+10 XP
3 weeks ago
Daily Hack Solved
- Count the compromised
+10 XP
4 weeks ago
Daily Hack Solved
- The version that leaks
+10 XP
1 month ago
Daily Hack Solved
- When did the backups die
+10 XP
1 month ago
Daily Hack Solved
- Follow the ransom BTC
+10 XP
1 month ago
Daily Hack Solved
- Single-byte XOR
+10 XP
1 month ago
Daily Hack Solved
- Who pulled the keys
+10 XP
1 month ago
Daily Hack Solved
- PEM, not JPG
+10 XP
1 month ago
Daily Hack Solved
- A token you can read
+10 XP
1 month ago
Daily Hack Solved
- Disabled but shipped
+10 XP
1 month ago
Daily Hack Solved
- Find the IAM privilege escalation
+10 XP
1 month ago
Active for 1 days
1 month ago
Daily Hack Solved
- Find the leaked AWS key
+10 XP
1 month ago
Daily Hack Solved
- Replay the withdrawal
+10 XP
1 month ago
Daily Hack Solved
- Who got root
+10 XP
1 month ago
Daily Hack Solved
- Read the system prompt
+10 XP
1 month ago
Daily Hack Solved
- Reverse then ROT
+10 XP
1 month ago
Daily Hack Solved
- ELF, not data
+10 XP
1 month ago
Daily Hack Solved
- Forge the group claim
+10 XP
1 month ago
Daily Hack Solved
- The webview endpoint
+10 XP
1 month ago
Daily Hack Solved
- Find the reentrancy bug
+10 XP
1 month ago