skalvin
✦ Legend ✦
¯\_(ツ)_/¯ Mess with the best, die like the rest
Activity
209 active days in the last year
Less
More
Rank Progress
✦ Legend ✦
Max Rank
Achievements
First Blood
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
Web Application SecurityMass AssignmentCommand InjectionHash CrackingPassword ReuseLinux Privilege EscalationLinux CapabilitiesPenetration TestingHost Header InjectionPassword Reset PoisoningPrivilege EscalationHTTP HeadersWeb ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbusePythonPickle DeserializationRCELinuxIDORAPI SecurityPath TraversalAccess ControlOAuth 2.0JWTWeb ReconConfiguration ExploitsUnicodeSteganographyWeb ForensicsText AnalysisCSSMedia QueriesSource AnalysisDevToolsCommand LineFile System NavigationHidden FilesgrepfindAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationAuthentication BypassJavaScriptWeb DevelopmentHexadecimalBrowser DevToolsImage AnalysisWebCTF BasicsNetwork AnalysisPacket CaptureWiresharkProtocol AnalysisBinary AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisWeb HackingLogic FlawsToken ManipulationBase64 EncodingAuthorization BypassMemory ForensicsDigital ForensicsPattern RecognitionIncident ResponseTool UsageData RecoveryROT13 EncodingWeb SecuritySession ManagementAuthenticationPHPFile UploadBypass TechniquesWeb ShellsInput ValidationSocial EngineeringPost ExploitationAudio AnalysisLSBForensicsKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsAlgorithm ConfusionRS256HS256Token ForgeryLogic FlawParameter ManipulationMD5Rainbow TablesDirectory FuzzingX-Forwarded-For SpoofingBruteforceffufNewline InjectionLinux EnumerationSUID ExploitationBuffer OverflowARM64 ROPStatic Binary AnalysisBinary ExploitationpwntoolsropperGDBWeb EnumerationWPClient-Side SecuritySecurity Through ObscurityView SourceBroken Access ControlHTMLIDOR ExploitationZip Slip VulnerabilityServer-Side Template InjectionInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationPassword CrackingLinux SecurityJohn the RipperhashcatCryptographySSHWindows SecurityNTLMHashcatHash AnalysisOffice SecurityHash ExtractionSQL InjectionRegex BypassSQLiteUNION-Based SQLiGitVersion ControlSource Code AnalysisReconnaissanceFile DiscoveryInformation GatheringType JugglingPassword AnalysisSecurity ToolsDatabase SecurityDeobfuscationCode AnalysisHTTP ProtocolRequest SmugglingNetwork ForensicsTraffic AnalysisPacket AnalysisEmail ForensicsHeader AnalysisPhishing DetectionBase64 DecodingOSINTDigital InvestigationSSRFURL ManipulationInternal Network AccessProtocol BypassSSTIFlask SecuritySSH Brute ForceDatabase EnumerationClassical CiphersPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRace ConditionsTiming AttacksConcurrent ExploitationSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentLocal File InclusionFilter BypassApache AuthenticationCookie ManipulationDOM ManipulationFilter EvasionGraphQLSchema IntrospectionInjectionDNS AnalysisData ExfiltrationFrequency AnalysisDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationSUID BinariesNoSQL InjectionMongoDBDocument DatabasesCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationLDAP InjectionDirectory ServicesEnterprise SecurityJWT ManipulationSSH ExploitationLog InjectionPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksIP SpoofingAccess Control BypassJinja2 ExploitationWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationWindows RegistryPersistence AnalysisMalware AnalysisHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryZIP Password CrackingfcrackzipBrute ForceArchive SecurityJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisVisibility ControlsSecurity TestingOperator ExploitationReverse ShellSystem EnumerationNetwork ReconnaissanceServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2File PermissionsCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementXSSCross-Site ScriptingStored XSSSession HijackingCGIClaims ManipulationTime-Based AttacksSignature CrackingBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityToken AuthenticationService DiscoveryCommand Line ToolsAttack DetectionFlaskDebug ModeMemory AnalysisTransposition CipherRail FencePDF ForensicsMetadataHidden DataForensic ToolsBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisLFIFile InclusionDNSCryptanalysisClassical CryptoData EncodingJenkinsCI/CDDevOpsPentestAutomationDatabase ForensicsCLI UsageBase64Hex EncodingRedisQR Code AnalysisMYSQLIWeb InspectionHTML AnalysisWEBFile Upload BypassPHP SecurityWeb Shell ExploitationApache TomcatWAR DeploymentDefault CredentialsSudoGITView Source CodeNmapNmap CommandsTelnetPort ScanningFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsIP SPOOFINGCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning Path
Host Hijack
Medium
Pickle Jar
Medium
ClearDesk
Medium
Token Trust
Challenge
Phantom Text
Challenge
Fine Print
Challenge
Linux Fundamentals Practice
Challenge
Compromised 2
Hard
Hex Hunt
Challenge
Stego Hunt
Challenge
Packet Pursuit
Challenge
Binary Secrets
Challenge
API Breaker
Challenge
Memory Forensics
Challenge
Session Switch
Challenge
File Upload Bypass
Challenge
Sonic Cipher
Challenge
KeePass Breaker
Challenge
JWT Algo Confusion
Challenge
API Logic Flaw
Challenge
Get the Password
Challenge
Hack the Box
Hard
Hidden CMS Breach
Medium
WP Ultimate
Hard
Broken Chain
Hard
Shadow Cracker
Challenge
TechNova Infiltration
Medium
Windows Password Cracker
Challenge
Office Password Cracker
Challenge
Regex Bypass to SQLi
Challenge
Git Exposed
Challenge
Backup Hunter
Challenge
Type Juggling Bypass
Challenge
Crack SHA1 Hash
Challenge
SQL Injection Test
Challenge
Hack This Site
Challenge
HTTP Smuggling
Challenge
Email Header Forensics
Challenge
SSRF Validator
Challenge
FortiPy
Hard
Vigenere Stego Hunt
Challenge
Simple Directory Traversal
Challenge
YAML Bomb
Challenge
WebDAV Explorer
Challenge
Prototype Pollution Hunter
Challenge
Race Condition Hunter
Challenge
IDOR Explorer
Challenge
Header Hijacker
Challenge
Corporate Directory Hunt
Challenge
File Include Bypass
Challenge
Cookie Forge
Challenge
Button Activator
Challenge
RCE Playground
Medium
GraphQL Gateway
Challenge
DNS Tunneling Detective
Challenge
Caesar Shift Decoder
Challenge
Registry Hijacker
Challenge
SUID Privilege Hunter
Challenge
MongoDB Injector
Challenge
Redis Cache Poisoner
Challenge
LDAP Injector
Challenge
Infiltrator
Easy
Corporate Backup Deserializer
Challenge
IP Spoofing Admin
Challenge
Template Injector
Challenge
WiFi Password Cracker
Challenge
WEP Cracker
Challenge
Registry Hunter
Challenge
Book Cipher Challenge
Challenge
Admin Portal Breach
Challenge
Git Secrets Hunter
Challenge
ZIP Cracker
Challenge
Template Injection
Challenge
PDF Password Cracker
Challenge
Shell Command Scanner
Challenge
LFI Log Poison
Challenge
NoSQL Injection
Challenge
Internal
Hard
URL Scanner
Challenge
Alpwned
Medium
CSRF Bank Transfer
Challenge
XSS Playground
Challenge
Path Traversal
Challenge
JWT Claims Manipulation
Challenge
SQL Injection
Challenge
XXE Exposed
Challenge
JWT Bypass
Challenge
Auth Bypass
Challenge
Ping Pwn
Challenge
Log Hunter
Challenge
Flask Error
Challenge
Rail Fence
Challenge
Pixel Puzzler
Challenge
PDF Trap
Challenge
Blockchain Secrets
Challenge
Corporate Breach 2
Challenge
Corporate Breach
Challenge
DNS Exfil
Challenge
Crypto Cipher
Challenge
Snapchat Exposed
Challenge
Red is Dead
Challenge
QR Code Quest
Challenge
Query Quake
Medium
Base64 Detective
Challenge
AlVault
Medium
FiPloit
Easy
Compromised 1
Medium
Traversed
Medium
Matsudo
Medium
Beyond Echo
Medium
Cronpocalypse
Easy
Include me
Easy
Anonymous 2
Easy
Anonymous
Easy
Spoof!
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Active reconnaissance
Post-exploitation
Pivoting
Service exploitation
Pentest reporting
Password attacks
MITM attacks
Vulnerability scanning
Network fundamentals
Service enumeration
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
Encoding is not encryption
The hacker mindset
Rainbow tables
Wireless cracking
PDF cracking
Linux hash cracking
Office Documents cracking
ZIP cracking
Brute force attacks
Password fundamentals
Dictionary attacks
Windows hash cracking
Hydra Cheat Sheet
Nikto Cheat Sheet
John the Ripper Cheat Sheet
SQLMap Cheat Sheet
Wireshark Cheat Sheet
Burp Suite Cheat Sheet
Gobuster Cheat Sheet
Nmap Cheat Sheet
Hashcat Cheat Sheet
Metasploit Cheat Sheet
CSRF Attacks
XXE Injection
SSRF
File Inclusion
Web Security Intro
SSTI
Deserialization
File Upload Attacks
XSS Attacks
Auth Bypass
SQL Injection
Command Injection
Bug Bounty
10
Quick wins
Hunting setup
Automation
Bug bounty basics
Hunting methodology
Avoiding duplicates
Bug bounty career
Recon fundamentals
Report writing
Program selection
JWT Basics
JWT Tampering
JWT Cracking
Algorithm Confusion
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Token impersonation
Windows privesc basics
WinPEAS and PowerUp
Service exploitation
Windows enumeration
Registry attacks
CVE
1
CVE-2024-34899
Daily Hack Solved
- Crack the reset token
+10 XP
21 hours ago
Lesson Completed
+10 XP
1 day ago
Daily Hack Solved
- Tamper the invoice ID
+10 XP
1 day ago
Active for 1 days
6 days ago
Lesson Completed
+5 XP
1 week ago
Chapter Completed
- Encoding is not encryption
+1 XP
1 week ago
Lesson Completed
+16 XP
1 week ago
Lesson Completed
+11 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Lesson Completed
+16 XP
1 week ago
Lesson Completed
+10 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Chapter Completed
- The hacker mindset
+1 XP
1 week ago
Active for 2 days
2 weeks ago
Flag Found
- Pwnify - Web Application Penetration Testing
+350 XP
2 weeks ago
Flag Found
- Pwnify - Web Application Penetration Testing
+350 XP
2 weeks ago
Active for 4 days
2 weeks ago
Profile Updated
+1 XP
1 month ago
Active for 11 days
1 month ago
Flag Found
- Host Hijack
+200 XP
1 month ago
Flag Found
- Host Hijack
+200 XP
1 month ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
1 month ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
1 month ago
Flag Found
- Pickle Jar
+200 XP
2 months ago
Flag Found
- Pickle Jar
+200 XP
2 months ago
Flag Found
- ClearDesk
+200 XP
2 months ago
Flag Found
- ClearDesk
+200 XP
2 months ago
Active for 5 days
3 months ago
Flag Found
- Token Trust
+50 XP
4 months ago
Chapter Completed
- Token impersonation
+1 XP
4 months ago
Chapter Completed
- Registry attacks
+1 XP
4 months ago
Chapter Completed
- WinPEAS and PowerUp
+1 XP
4 months ago