polo
Grandmaster
Activity
17 active days in the last year
Less
More
Rank Progress
Grandmaster
✦ Legend ✦
14400 / 16884 XP
Achievements
Streak Starter
Lab Rat
Lab Expert
Lab Master
Scholar
Local File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalWeb SecurityApache SecuritySystem AdministrationLog AnalysisNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationPDF SecurityPassword CrackingDictionary AttacksDigital ForensicsDocument SecurityBrute Force AttacksZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityDocker Registry APIAuthentication BypassContainer SecurityAPI ManipulationRegistry ExploitationGraphQLAPI SecuritySchema IntrospectionAuthorization BypassInjectionCSRFCross-Site Request ForgerySession SecuritySocial EngineeringForm SecurityHTTP SecurityState ManagementXSSCross-Site ScriptingStored XSSSession HijackingJavaScriptClient-Side SecurityDOM ManipulationJWTClaims ManipulationPrivilege EscalationTime-Based AttacksSignature CrackingXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentAlgorithm ConfusionRS256HS256Token ForgeryToken AuthenticationCryptographySQL InjectionDatabase SecurityCommand InjectionWeb ExploitationService DiscoveryNetwork SecurityLogic FlawParameter ManipulationPHPPath TraversalCGIFile AccessInput ValidationFile UploadBypass TechniquesWeb ShellsPost ExploitationBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2MD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksWiFi SecurityWPA CrackingWireless Penetration TestingPacket AnalysisWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware AnalysisSteganographyAudio AnalysisLSBForensicsPythonCookie ManipulationPattern RecognitionFile DiscoveryCommand Line ToolsHTTP ProtocolAttack DetectionSecurity AssessmentWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationServer-Side Template InjectionFlask SecurityJinja2 ExploitationFilter BypassApache AuthenticationBrowser DevToolsDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoveryBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisHTTP HeadersSecurity BypassClient-Side ManipulationIDORRace ConditionsTiming AttacksConcurrent ExploitationFlaskDebug ModeMemory AnalysisClassical CiphersFrequency AnalysisIP SpoofingInformation GatheringLFIPath ManipulationFile InclusionNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisLDAP InjectionDirectory ServicesEnterprise SecurityCryptanalysisClassical CryptoData EncodingSession ManagementAuthenticationJenkinsCI/CDDevOpsPentestAutomationNetwork ReconnaissanceDatabase ForensicsCLI UsageData RecoveryBase64Hex EncodingRedisNetwork AnalysisDNSPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsTransposition CipherRail FencePrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesMemory ForensicsBinary AnalysisTool UsageROT13 EncodingWeb HackingLogic FlawsToken ManipulationBase64 EncodingQR Code AnalysisImage AnalysisWeb InspectionHTML AnalysisWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityPath InjectionFile System SecurityURL ManipulationInternal Network AccessProtocol BypassSSHLinuxSudoPenetration TestingPolyalphabetic CiphersEmail ForensicsHeader AnalysisPhishing DetectionOSINTDigital InvestigationRequest SmugglingHash CrackingPassword AnalysisSecurity ToolsHex EditorsData StructuresReverse EngineeringType JugglingHash AnalysisWeb EnumerationReconnaissanceGitVersion ControlWeb DevelopmentHexadecimalWebCTF BasicsPacket CaptureWiresharkProtocol AnalysisRegex BypassSQLiteUNION-Based SQLiMD5Rainbow TablesLinux SecurityhashcatCommand LineFile System NavigationHidden FilesgrepfindUnicodeWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsOAuth 2.0Web ReconConfiguration ExploitsFile Upload BypassPHP SecurityWeb Shell ExploitationFilter EvasionFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationJWT ManipulationSSH ExploitationLog InjectionLinux CapabilitiesReverse ShellSystem EnumerationFile EnumerationCron JobsConfiguration AnalysisXORKnown-Plaintext AttackDeobfuscationCode AnalysisWindows SecurityNTLMHashcatOffice SecurityHash ExtractionMass AssignmentPassword ReuseLinux Privilege EscalationDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBSSTISSH Brute ForceCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbuseHost Header InjectionPassword Reset PoisoningCVE ExploitationMYSQLIRCEPickle DeserializationFile PermissionsApache TomcatWAR DeploymentDefault CredentialsGITWEBAccess ControlIP SPOOFINGFTPSecurity Through ObscurityView SourceBroken Access ControlHTMLCookie PoisoningSession TamperingNmapNmap CommandsTelnetPort ScanningView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
LFI Log Poison
Challenge
NoSQL Injection
Challenge
PDF Password Cracker
Challenge
ZIP Cracker
Challenge
Registry Hijacker
Challenge
GraphQL Gateway
Challenge
CSRF Bank Transfer
Challenge
XSS Playground
Challenge
JWT Claims Manipulation
Challenge
XXE Exposed
Challenge
JWT Algo Confusion
Challenge
JWT Bypass
Challenge
Auth Bypass
Challenge
Ping Pwn
Challenge
API Logic Flaw
Challenge
Path Traversal
Challenge
File Upload Bypass
Challenge
SQL Injection
Challenge
URL Scanner
Challenge
Admin Portal Breach
Challenge
WiFi Password Cracker
Challenge
Registry Hunter
Challenge
Sonic Cipher
Challenge
Cookie Forge
Challenge
Log Hunter
Challenge
WEP Cracker
Challenge
Template Injector
Challenge
File Include Bypass
Challenge
Button Activator
Challenge
Corporate Directory Hunt
Challenge
Blockchain Secrets
Challenge
Header Hijacker
Challenge
IDOR Explorer
Challenge
Race Condition Hunter
Challenge
Flask Error
Challenge
Caesar Shift Decoder
Challenge
IP Spoofing Admin
Challenge
Corporate Breach 2
Challenge
DNS Tunneling Detective
Challenge
LDAP Injector
Challenge
Corporate Breach
Challenge
Crypto Cipher
Challenge
Session Switch
Challenge
Snapchat Exposed
Challenge
Red is Dead
Challenge
DNS Exfil
Challenge
PDF Trap
Challenge
Rail Fence
Challenge
Prototype Pollution Hunter
Challenge
Memory Forensics
Challenge
API Breaker
Challenge
QR Code Quest
Challenge
Base64 Detective
Challenge
WebDAV Explorer
Challenge
YAML Bomb
Challenge
Simple Directory Traversal
Challenge
SSRF Validator
Challenge
Matsudo
Medium
Vigenere Stego Hunt
Challenge
Email Header Forensics
Challenge
HTTP Smuggling
Challenge
Crack SHA1 Hash
Challenge
Binary Secrets
Challenge
Type Juggling Bypass
Challenge
Backup Hunter
Challenge
Git Exposed
Challenge
Pixel Puzzler
Challenge
Hex Hunt
Challenge
Stego Hunt
Challenge
Packet Pursuit
Challenge
Regex Bypass to SQLi
Challenge
Get the Password
Challenge
Shadow Cracker
Challenge
Linux Fundamentals Practice
Challenge
Phantom Text
Challenge
Fine Print
Challenge
Token Trust
Challenge
FiPloit
Easy
RCE Playground
Medium
Anonymous 2
Easy
Infiltrator
Easy
Internal
Hard
Scheduled Sabotage
Easy
XOR Reuse
Challenge
Hack This Site
Challenge
Windows Password Cracker
Challenge
Office Password Cracker
Challenge
SQL Injection Test
Challenge
Hack the Box
Hard
FortiPy
Hard
Host Hijack
Medium
TechNova Infiltration
Medium
Query Quake
Medium
Pickle Jar
Medium
Alpwned
Medium
Compromised 1
Medium
Traversed
Medium
AlVault
Medium
Beyond Echo
Medium
Hidden CMS Breach
Medium
ClearDesk
Medium
Cronpocalypse
Easy
Spoof!
Easy
Anonymous
Easy
Include me
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Pipes and data pipelines
Users, groups, and permissions
Filesystem navigation
Process management
Environment and package management
Bash scripting for security
Searching for what matters
Reading and manipulating files
Your first terminal session
Network commands
Active for 1 days
22 hours ago
Flag Found
- LFI Log Poison
+50 XP
1 week ago
Daily Hack Solved
- Read the shell history
+10 XP
1 week ago
Flag Found
- NoSQL Injection
+50 XP
1 week ago
Flag Found
- PDF Password Cracker
+50 XP
1 week ago
Flag Found
- ZIP Cracker
+50 XP
1 week ago
Flag Found
- Registry Hijacker
+50 XP
1 week ago
Flag Found
- GraphQL Gateway
+50 XP
1 week ago
Flag Found
- CSRF Bank Transfer
+50 XP
1 week ago
Flag Found
- XSS Playground
+50 XP
1 week ago
Flag Found
- JWT Claims Manipulation
+50 XP
1 week ago
Flag Found
- XXE Exposed
+50 XP
1 week ago
Flag Found
- JWT Algo Confusion
+50 XP
1 week ago
Flag Found
- JWT Bypass
+50 XP
1 week ago
Flag Found
- Auth Bypass
+50 XP
1 week ago
Flag Found
- Ping Pwn
+50 XP
1 week ago
Flag Found
- API Logic Flaw
+50 XP
1 week ago
Flag Found
- Path Traversal
+50 XP
1 week ago
Flag Found
- File Upload Bypass
+50 XP
1 week ago
Flag Found
- SQL Injection
+50 XP
1 week ago
Flag Found
- URL Scanner
+50 XP
1 week ago
Flag Found
- Admin Portal Breach
+50 XP
1 week ago
Flag Found
- WiFi Password Cracker
+50 XP
1 week ago
Flag Found
- Registry Hunter
+50 XP
1 week ago
Flag Found
- Sonic Cipher
+50 XP
1 week ago
Flag Found
- Cookie Forge
+50 XP
1 week ago
Flag Found
- Log Hunter
+50 XP
1 week ago
Daily Hack Solved
- Geolocate the photo
+10 XP
1 week ago
Flag Found
- WEP Cracker
+50 XP
1 week ago
Flag Found
- Template Injector
+50 XP
1 week ago
Flag Found
- File Include Bypass
+50 XP
1 week ago
Flag Found
- Button Activator
+50 XP
1 week ago
Chapter Completed
- Bash scripting for security
+1 XP
1 week ago
Chapter Completed
- Environment and package management
+1 XP
1 week ago
Chapter Completed
- Network commands
+1 XP
1 week ago
Chapter Completed
- Process management
+1 XP
1 week ago
Chapter Completed
- Pipes and data pipelines
+1 XP
1 week ago
Chapter Completed
- Users, groups, and permissions
+1 XP
1 week ago
Chapter Completed
- Searching for what matters
+1 XP
1 week ago
Chapter Completed
- Reading and manipulating files
+1 XP
1 week ago
Chapter Completed
- Filesystem navigation
+1 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Flag Found
- Corporate Directory Hunt
+50 XP
1 week ago
Flag Found
- Blockchain Secrets
+50 XP
1 week ago
Flag Found
- Header Hijacker
+50 XP
1 week ago
Flag Found
- IDOR Explorer
+50 XP
1 week ago
Flag Found
- Race Condition Hunter
+50 XP
1 week ago
Flag Found
- Flask Error
+50 XP
1 week ago
Flag Found
- Caesar Shift Decoder
+50 XP
1 week ago
Flag Found
- IP Spoofing Admin
+50 XP
1 week ago