saraivadigital
✦ Legend ✦
Online
Enjoy!
Activity
42 active days in the last year
Less
More
Rank Progress
✦ Legend ✦
Max Rank
Achievements
First Blood
Streak Starter
Streak Master
Streak Legend
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
Pro Member
SSRFCloud Penetration TestingAWS IMDSIMDSv2IAM Credential TheftPrivilege EscalationMetadata Service AbuseAPI EnumerationJWTAlgorithm ConfusionRS256HS256Token ForgeryWeb SecurityToken AuthenticationCryptographyClaims ManipulationAuthentication BypassTime-Based AttacksSignature CrackingServer-Side Template InjectionJinja2Flask SecurityWeb Application TestingCode InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationAPI SecurityLogic FlawParameter ManipulationPHPFile UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesGitVersion ControlSource Code AnalysisReconnaissanceLFIPath ManipulationFile InclusionSession ManagementAuthenticationServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsNetwork SecurityAWS EC2Network ReconnaissanceService DiscoveryDatabase ForensicsData EncodingCLI UsageData RecoveryIncident ResponseBase64Hex EncodingRedisWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassJenkinsCI/CDDevOpsPentestAutomationPassword CrackingDirectory TraversalJavaScriptBrowser DevToolsDOM ManipulationClient-Side SecurityLDAP InjectionDirectory ServicesNoSQL InjectionMongoDBVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationRace ConditionsTiming AttacksConcurrent ExploitationWeb Application SecurityGraphQLSchema IntrospectionInjectionYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationXXEXML SecurityFile DisclosureExternal EntityVulnerability AssessmentPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsTransposition CipherRail FencePattern RecognitionPythonKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsZIP Password CrackingJohn the RipperfcrackzipDictionary AttacksBrute ForceArchive SecurityOffice SecurityHash ExtractionHashcatPDF SecurityDigital ForensicsDocument SecurityBrute Force AttacksNetwork AnalysisDNSPacket AnalysisData ExfiltrationBase64 DecodingWiFi SecurityWPA CrackingWireless Penetration TestingWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationQR Code AnalysisImage AnalysisData ExtractionSteganographyPacket CaptureWiresharkProtocol AnalysisLSBForensicsWebCTF BasicsBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisAudio AnalysisMD5 CrackingPassword AttacksClassical CiphersPolyalphabetic CiphersWeb InspectionHTML AnalysisBinary AnalysisHex EditorsData StructuresReverse EngineeringMemory ForensicsTool UsageROT13 EncodingWindows RegistryPersistence AnalysisMalware AnalysisWeb DevelopmentHexadecimalFlaskDebug ModeMemory AnalysisJinja2 ExploitationHTTP HeadersIP SpoofingInformation GatheringDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationNetwork ForensicsDNS AnalysisTraffic AnalysisDocument DatabasesDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentSQL InjectionDatabase SecurityBlind SQLiTime-based SQLiBoolean-based SQLiDatabase EnumerationXSSCross-Site ScriptingStored XSSSession HijackingLocal File InclusionUser-Agent Log PoisoningApache SecuritySystem AdministrationLog AnalysisCommand InjectionShell CommandsHTTP Parameter ManipulationSecurity BypassClient-Side ManipulationCookie ManipulationType JugglingHash AnalysisRegex BypassSQLiteUNION-Based SQLiLinuxCommand LineFile System NavigationHidden FilesgrepfindEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationHTTP ProtocolRequest SmugglingWeb EnumerationFile DiscoveryUnicodeWeb ForensicsText AnalysisFilter BypassApache AuthenticationURL ManipulationInternal Network AccessProtocol BypassIDORPath InjectionFile System SecurityFile AccessOAuth 2.0Web ReconConfiguration ExploitsCSSMedia QueriesSource AnalysisDevToolsIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationSUID BinariesLinux SecurityBinary ExploitationHistorical CryptanalysisCryptanalysisClassical CryptoMD5Rainbow TablesHash CrackingPassword AnalysisSecurity ToolsXORKnown-Plaintext AttackAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationFrequency AnalysisLinux CapabilitiesReverse ShellSystem EnumerationWindows SecurityNTLMhashcatWPFilter EvasionSSHSudoFile Upload BypassPHP SecurityWeb Shell ExploitationFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationJWT ManipulationSSH ExploitationLog InjectionFile EnumerationCron JobsConfiguration AnalysisWeb ExploitationHeadless CMSInformation DisclosureRevision HistoryToken AbuseMYSQLIRCEDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysispwntoolsropperGDBMass AssignmentPassword ReuseLinux Privilege EscalationHost Header InjectionPassword Reset PoisoningWEBGITApache TomcatWAR DeploymentDefault CredentialsPickle DeserializationCrackmeKeygenobjdumpELFARM64 AssemblyStatic AnalysisGhidraSSTISSH Brute ForceCommand Line ToolsAttack DetectionPath TraversalCGIDeobfuscationCode AnalysisFile PermissionsIP SPOOFINGAccess ControlCookie PoisoningSession TamperingSecurity Through ObscurityView SourceBroken Access ControlHTMLFTPNmapNmap CommandsTelnetPort ScanningView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
JWT Algo Confusion
Challenge
JWT Bypass
Challenge
JWT Claims Manipulation
Challenge
Template Injection
Challenge
Corporate Backup Deserializer
Challenge
Git Secrets Hunter
Challenge
Redis Cache Poisoner
Challenge
API Logic Flaw
Challenge
File Upload Bypass
Challenge
Prototype Pollution Hunter
Challenge
Git Exposed
Challenge
Corporate Breach 2
Challenge
Session Switch
Challenge
URL Scanner
Challenge
Red is Dead
Challenge
API Breaker
Challenge
Snapchat Exposed
Challenge
Corporate Breach
Challenge
Button Activator
Challenge
LDAP Injector
Challenge
NoSQL Injection
Challenge
Race Condition Hunter
Challenge
GraphQL Gateway
Challenge
YAML Bomb
Challenge
CSRF Bank Transfer
Challenge
WebDAV Explorer
Challenge
XXE Exposed
Challenge
PDF Trap
Challenge
Rail Fence
Challenge
KeePass Breaker
Challenge
ZIP Cracker
Challenge
Office Password Cracker
Challenge
PDF Password Cracker
Challenge
DNS Exfil
Challenge
WiFi Password Cracker
Challenge
WEP Cracker
Challenge
QR Code Quest
Challenge
Packet Pursuit
Challenge
Pixel Puzzler
Challenge
Stego Hunt
Challenge
Blockchain Secrets
Challenge
Sonic Cipher
Challenge
Admin Portal Breach
Challenge
Vigenere Stego Hunt
Challenge
Base64 Detective
Challenge
Binary Secrets
Challenge
Memory Forensics
Challenge
Registry Hunter
Challenge
Hex Hunt
Challenge
Flask Error
Challenge
Template Injector
Challenge
IP Spoofing Admin
Challenge
Registry Hijacker
Challenge
DNS Tunneling Detective
Challenge
MongoDB Injector
Challenge
Corporate Directory Hunt
Challenge
SQL Injection
Challenge
XSS Playground
Challenge
LFI Log Poison
Challenge
Shell Command Scanner
Challenge
Header Hijacker
Challenge
Cookie Forge
Challenge
Type Juggling Bypass
Challenge
Regex Bypass to SQLi
Challenge
Linux Fundamentals Practice
Challenge
Email Header Forensics
Challenge
HTTP Smuggling
Challenge
Backup Hunter
Challenge
Phantom Text
Challenge
File Include Bypass
Challenge
SSRF Validator
Challenge
IDOR Explorer
Challenge
Simple Directory Traversal
Challenge
Token Trust
Challenge
Fine Print
Challenge
Broken Chain
Hard
SUID Privilege Hunter
Challenge
Book Cipher Challenge
Challenge
Crypto Cipher
Challenge
Get the Password
Challenge
Crack SHA1 Hash
Challenge
XOR Reuse
Challenge
Compromised 2
Hard
Caesar Shift Decoder
Challenge
Internal
Hard
Windows Password Cracker
Challenge
Shadow Cracker
Challenge
WP Ultimate
Hard
RCE Playground
Medium
Matsudo
Medium
FiPloit
Easy
Anonymous 2
Easy
Infiltrator
Easy
Scheduled Sabotage
Easy
Query Quake
Medium
Hack the Box
Hard
Host Hijack
Medium
AlVault
Medium
TechNova Infiltration
Medium
Traversed
Medium
Beyond Echo
Medium
Compromised 1
Medium
Pickle Jar
Medium
FortiPy
Hard
Log Hunter
Challenge
Path Traversal
Challenge
Ping Pwn
Challenge
Auth Bypass
Challenge
Hack This Site
Challenge
Alpwned
Medium
Hidden CMS Breach
Medium
Cronpocalypse
Easy
Spoof!
Easy
ClearDesk
Medium
Include me
Easy
SQL Injection Test
Challenge
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Anonymous
Easy
Hack the Login
Very Easy
Penetration testing careers
The cybersecurity industry
Active reconnaissance
Post-exploitation
Pivoting
Service exploitation
Pentest reporting
Password attacks
MITM attacks
Vulnerability scanning
Network fundamentals
Service enumeration
Red Teaming
10
Attack infrastructure
Persistence techniques
Initial access
Red team basics
Purple teaming
Defense evasion
Engagement reporting
C2 frameworks
Mission objectives
Lateral movement
Bug Bounty
10
Quick wins
Hunting setup
Automation
Bug bounty basics
Hunting methodology
Avoiding duplicates
Bug bounty career
Recon fundamentals
Report writing
Program selection
Hacking 101
10
The network underneath
Vulnerabilities and exploits
How passwords break
Encoding is not encryption
The hacker mindset
Your roadmap
Hacking humans
Hidden in plain sight
Open-source intelligence
The hacker's toolkit
Lesson Completed
+15 XP
6 hours ago
Lesson Completed
+10 XP
6 hours ago
Lesson Completed
+5 XP
6 hours ago
Daily Hack Solved
- SSRF the cloud metadata
+10 XP
6 hours ago
Chapter Completed
- Pentest reporting
+1 XP
15 hours ago
Chapter Completed
- Post-exploitation
+1 XP
15 hours ago
Chapter Completed
- Pivoting
+1 XP
15 hours ago
Chapter Completed
- MITM attacks
+1 XP
15 hours ago
Chapter Completed
- Password attacks
+1 XP
16 hours ago
Chapter Completed
- Service exploitation
+1 XP
16 hours ago
Chapter Completed
- Vulnerability scanning
+1 XP
16 hours ago
Chapter Completed
- Service enumeration
+1 XP
16 hours ago
Chapter Completed
- Active reconnaissance
+1 XP
16 hours ago
Chapter Completed
- Network fundamentals
+1 XP
16 hours ago
Lesson Completed
+15 XP
1 day ago
Lesson Completed
+10 XP
1 day ago
Lesson Completed
+5 XP
1 day ago
Daily Hack Solved
- Loot the instance role
+10 XP
1 day ago
Daily Hack First Blood
- Loot the instance role
+10 XP
1 day ago
Daily Hack Solved
- Same handle everywhere
+10 XP
2 days ago
Lesson Completed
+15 XP
2 days ago
Lesson Completed
+10 XP
2 days ago
Lesson Completed
+5 XP
2 days ago
Flag Found
- SSRF Attack: Steal Cloud Metadata Credentials
+200 XP
2 days ago
Flag Found
- SSRF Attack: Steal Cloud Metadata Credentials
+200 XP
2 days ago
Lesson Completed
+15 XP
2 days ago
Lesson Completed
+10 XP
2 days ago
Lesson Completed
+5 XP
2 days ago
Chapter Completed
- The cybersecurity industry
+1 XP
2 days ago
Chapter Completed
- Penetration testing careers
+1 XP
3 days ago
Lesson Completed
+15 XP
3 days ago
Lesson Completed
+10 XP
3 days ago
Lesson Completed
+5 XP
3 days ago
Daily Hack Solved
- CloudTrail anomaly
+10 XP
3 days ago
Lesson Completed
+15 XP
4 days ago
Lesson Completed
+10 XP
4 days ago
Lesson Completed
+5 XP
4 days ago
Lesson Completed
+15 XP
4 days ago
Lesson Completed
+10 XP
4 days ago
Lesson Completed
+5 XP
4 days ago
Daily Hack Solved
- Vigenere then base64
+10 XP
4 days ago
Lesson Completed
+15 XP
4 days ago
Lesson Completed
+10 XP
4 days ago
Lesson Completed
+5 XP
4 days ago
Lesson Completed
+15 XP
4 days ago
Lesson Completed
+11 XP
4 days ago
Lesson Completed
+5 XP
4 days ago
Daily Hack Solved
- Read the JWT claim
+10 XP
5 days ago
Flag Found
- JWT Algo Confusion
+50 XP
5 days ago
Flag Found
- JWT Bypass
+50 XP
5 days ago