moatmon
Master
Live Ranking
#14
Best: #14
Total Points
739
Total Earned
Labs Completed
35
35 User • 14 Root
Modules
39
Validated
First Bloods
0
First to Complete
Best Streak
5
Days
Skills Acquired
Technical skills practiced through completed labs
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim ExploitationWPLocal File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationLog AnalysisWeb EnumerationWeb SecurityAuthenticationRCELinuxPassword CrackingLinux SecurityJohn the RipperhashcatCryptographySSHCVE ExploitationHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning PathWindows SecurityNTLMHashcatHash AnalysisSQL InjectionAuthentication BypassLinux Privilege EscalationFile PermissionsWeb Application SecurityCommand InjectionLinux CapabilitiesReverse ShellSystem EnumerationNetwork ReconnaissanceJWT ManipulationSSH ExploitationLog InjectionOffice SecurityHash ExtractionRegex BypassInput ValidationSQLiteUNION-Based SQLiGitVersion ControlReconnaissanceJavaScriptDeobfuscationCode AnalysisDatabase SecurityPenetration TestingApache TomcatWAR DeploymentDefault CredentialsSudoWeb ShellsGITMYSQLIBrute ForcePHPWeb ExploitationService DiscoveryNetwork SecurityIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity AssessmentPath TraversalCGIFile AccessIP SPOOFINGFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPLFITELNETWEBWebNetworkingCommand LineWeb Services
Completed Modules
Educational modules successfully validated
Nmap Mastery: Dominate Network Scanning
4 modulesInstalling Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
HTTP Header Manipulation: IP Spoofing
3 modulesRemediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Password Cracking: Advanced Techniques for Security Assessment
8 modulesRainbow Tables and Precomputed Attacks
Wireless Network Password Attacks
Linux Password Cracking (Shadow Files)
Office Document Password Recovery
Brute Force and Hybrid Attack Techniques
Password Security Fundamentals
Dictionary Attacks and Wordlist Optimization
Windows System Password Recovery
HDNA Ethical Hacking Course
5 modules1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Web Application Security: Exploitation and Defense
12 modulesCross-Site Request Forgery
XML External Entity Injection
Server-Side Request Forgery
Local and Remote File Inclusion
Course Introduction
Server-Side Template Injection
Deserialization Attacks
File Upload Exploitation
Cross-Site Scripting
Authentication Bypass
SQL Injection
Command Injection
JWT Ethical Hacking: Token Takeover Tactics
4 modulesIntroduction to JWT Tokens
Claims Manipulation and Time-Based Attacks
Secret Key Brute Forcing
Algorithm Confusion Exploits
Remote Code Execution (RCE)
3 modulesShellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Completed Labs & Challenges
Hands-on cybersecurity challenges successfully completed
Broken Chain
Hard
IDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationPrivilege EscalationSudo Vim Exploitation
WP Ultimate
Hard
WP
FiPloit
Easy
Local File InclusionFile Upload BypassPHP SecurityDirectory TraversalWeb Shell ExploitationPrivilege EscalationLog Analysis
Hidden CMS Breach
Medium
Web EnumerationWeb SecurityAuthenticationRCEPrivilege EscalationLinux
Shadow Cracker
Challenge
Password CrackingLinux SecurityJohn the RipperhashcatCryptography
TechNova Infiltration
Medium
Web EnumerationSSHPassword CrackingPrivilege EscalationLinux SecurityCVE Exploitation
Secrets in Source 2
Very Easy
Web SecurityHTMLBrowser DevToolsClient-Side SecuritySource Code AnalysisLearning Path
Windows Password Cracker
Challenge
Password CrackingWindows SecurityNTLMHashcatJohn the RipperHash Analysis
Cronpocalypse
Easy
SSH
Alpwned
Medium
SQL InjectionAuthentication BypassSSHLinux Privilege EscalationFile PermissionsWeb Application Security
Internal
Hard
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork Reconnaissance
Infiltrator
Easy
JWT ManipulationSSH ExploitationLog InjectionPrivilege EscalationWeb SecurityLinux Security
Office Password Cracker
Challenge
Password CrackingOffice SecurityHash ExtractionJohn the RipperHashcat
Regex Bypass to SQLi
Challenge
SQL InjectionRegex BypassInput ValidationWeb Application SecuritySQLiteUNION-Based SQLi
Git Exposed
Challenge
GitVersion ControlSource Code AnalysisReconnaissanceWeb Security
Hack This Site
Challenge
JavaScriptDeobfuscationClient-Side SecurityBrowser DevToolsCode AnalysisAuthentication Bypass
SQL Injection Test
Challenge
SQL InjectionWeb SecurityDatabase SecurityAuthentication BypassInput ValidationPenetration Testing
Compromised 1
Medium
Apache TomcatWeb Application SecurityWAR DeploymentDefault CredentialsPrivilege EscalationLinuxSudoWeb Shells
Traversed
Medium
GIT
Query Quake
Medium
MYSQLIRCE
Matsudo
Medium
SSHBrute ForcePrivilege EscalationLinuxSudoNetwork ReconnaissancePenetration Testing
Beyond Echo
Medium
PHPRCE
Auth Bypass
Challenge
SQL InjectionAuthentication BypassWeb SecurityDatabase Security
Ping Pwn
Challenge
Command InjectionWeb ExploitationService DiscoveryNetwork Security
Log Hunter
Challenge
Log AnalysisWeb SecurityIncident ResponsePattern RecognitionFile DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionSecurity Assessment
Path Traversal
Challenge
Path TraversalCGIWeb SecurityFile AccessDirectory TraversalInput Validation
Spoof!
Easy
IP SPOOFING
Anonymous 2
Easy
FTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem Exploitation
Anonymous
Easy
FTP
Include me
Easy
PHPLFI
Secrets in Source
Very Easy
HTMLLearning Path
Nmap Lab 102
Very Easy
TELNETLearning Path
Hack the Cookie
Very Easy
WEBLearning Path
Hack the Login
Very Easy
WebAuthenticationClient-Side SecurityLearning Path
Onboarding Lab: Access and Flags
Very Easy
NetworkingReconnaissanceCommand LineWeb ServicesLearning Path
Courses Progress
Your learning paths and modules