mhafe
Master
Breaking things to learn how they work. 9 flags down, climbing from #460 one exploit at a time. Junior rank, senior curiosity.
Activity
35 active days in the last yearRank Progress
Master
Grandmaster
9143 / 12693 XP
Achievements
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
NmapNmap CommandsTelnetPort ScanningNetwork ReconnaissancePrivilege EscalationSQL InjectionAuthentication BypassWeb SecurityDatabase SecurityCommand InjectionWeb ExploitationService DiscoveryNetwork SecurityLog AnalysisIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity AssessmentPath TraversalCGIFile AccessDirectory TraversalInput ValidationJavaScriptDeobfuscationClient-Side SecurityBrowser DevToolsCode AnalysisJWT ManipulationSSH ExploitationLog InjectionLinux SecurityPHPLFIFTPIP SPOOFINGPassword CrackingCustom WordlistWordlist GenerationPRINCE ModeJohn the Ripperzip2johnMD5Hash CrackingOSINTPassword ReuseSSHLinux Privilege EscalationFile PermissionsWeb Application SecurityWEBPenetration TestingWeb EnumerationAuthenticationRCELinuxApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsWPCVE ExploitationGITHost Header InjectionPassword Reset PoisoningHTTP HeadersPythonPickle DeserializationReverse EngineeringBinary AnalysisCrackmeKeygenobjdumpGDBELFARM64 AssemblyStatic AnalysisGhidraSSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftMetadata Service AbuseAPI EnumerationHeadless CMSInformation DisclosureRevision HistoryToken AbuseDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperMass AssignmentLinux CapabilitiesIDORAPI SecurityAccess ControlSecurity Through ObscurityView SourceBroken Access ControlHTMLCookie PoisoningSession TamperingBase64 EncodingView Source CodeSource Code AnalysisBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFCTF BasicsFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Auth Bypass
Challenge
Ping Pwn
Challenge
Log Hunter
Challenge
Path Traversal
Challenge
Hack This Site
Challenge
Infiltrator
Easy
Include me
Easy
Anonymous
Easy
Spoof!
Easy
Cronpocalypse
Easy
Alpwned
Medium
AlVault
Medium
SQL Injection Test
Challenge
Hidden CMS Breach
Medium
Beyond Echo
Medium
Compromised 1
Medium
WP Ultimate
Hard
TechNova Infiltration
Medium
Traversed
Medium
Host Hijack
Medium
Pickle Jar
Medium
Hack the Box
Hard
ClearDesk
Medium
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
The hacker mindset
Hidden in plain sight
Lesson Completed
+11 XP
1 day ago
Daily Hack Solved
- The file that kept its name
+10 XP
1 day ago
Active for 1 days
6 days ago
Streak Frozen
1 week ago
Active for 2 days
1 week ago
Daily Hack Solved
- A minute of weak tickets
+10 XP
1 week ago
Active for 1 days
1 week ago
Lesson Completed
+5 XP
1 week ago
Daily Hack Solved
- The analytics script nobody added
+10 XP
1 week ago
Active for 1 days
1 week ago
Daily Hack Solved
- Deleted in the last layer
+10 XP
2 weeks ago
Flag Found
- Nmap Commands Lab: Port Scanning to Privilege Escalation
+50 XP
2 weeks ago
Flag Found
- Nmap Commands Lab: Port Scanning to Privilege Escalation
+50 XP
2 weeks ago
Lesson Completed
+15 XP
2 weeks ago
Daily Hack Solved
- Two logins too far apart
+10 XP
2 weeks ago
Daily Hack Solved
- The key that poisoned the base
+10 XP
2 weeks ago
Chapter Completed
- Hidden in plain sight
+1 XP
2 weeks ago
Lesson Completed
+11 XP
2 weeks ago
Flag Found
- Auth Bypass
+50 XP
2 weeks ago
Flag Found
- Ping Pwn
+50 XP
2 weeks ago
Flag Found
- Log Hunter
+50 XP
2 weeks ago
Flag Found
- Path Traversal
+50 XP
2 weeks ago
Daily Hack Solved
- The origin it trusted
+10 XP
2 weeks ago
Active for 1 days
2 weeks ago
Lesson Completed
+5 XP
2 weeks ago
Daily Hack Solved
- Who really called
+10 XP
2 weeks ago
Daily Hack Solved
- The name that points nowhere
+10 XP
3 weeks ago
Flag Found
- Hack This Site
+50 XP
3 weeks ago
Lesson Completed
+16 XP
3 weeks ago
Daily Hack Solved
- The folder that shipped itself
+10 XP
3 weeks ago
Lesson Completed
+11 XP
3 weeks ago
Flag Found
- Infiltrator
+100 XP
3 weeks ago
Flag Found
- Infiltrator
+100 XP
3 weeks ago
Flag Found
- Include me
+100 XP
3 weeks ago
Flag Found
- Anonymous
+100 XP
3 weeks ago
Flag Found
- Spoof!
+100 XP
3 weeks ago
Flag Found
- Password Cracking - Custom Wordlist Attack
+100 XP
3 weeks ago
Flag Found
- Password Cracking - Custom Wordlist Attack
+100 XP
3 weeks ago
Flag Found
- Cronpocalypse
+100 XP
3 weeks ago
Flag Found
- Cronpocalypse
+100 XP
3 weeks ago
Daily Hack Solved
- One password, many doors
+10 XP
3 weeks ago
Chapter Completed
- The hacker mindset
+1 XP
3 weeks ago
Daily Hack Solved
- The redaction that was a layer
+10 XP
3 weeks ago
Flag Found
- Query Quake
+200 XP
3 weeks ago
Flag Found
- Alpwned
+200 XP
3 weeks ago
Flag Found
- AlVault
+200 XP
3 weeks ago
Flag Found
- AlVault
+200 XP
3 weeks ago
Daily Hack Solved
- The role any repo can wear
+10 XP
3 weeks ago
Flag Found
- SQL Injection Test
+50 XP
3 weeks ago