Varythor
Grandmaster
Online
Just some guy.
Activity
23 active days in the last year
Less
More
Rank Progress
Grandmaster
✦ Legend ✦
14314 / 15784 XP
Achievements
First Blood
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
Pro Member
Command InjectionLinux CapabilitiesPrivilege EscalationReverse ShellWeb Application SecuritySystem EnumerationNetwork ReconnaissanceCRLF InjectionRedis Command InjectionCache PoisoningProtocol ManipulationWeb SecurityPrototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksEnterprise SecurityLocal File InclusionUser-Agent Log PoisoningRemote Code ExecutionDirectory TraversalApache SecuritySystem AdministrationLog AnalysisWeb ExploitationHeadless CMSAPI EnumerationInformation DisclosureRevision HistoryToken AbuseFile UploadBypass TechniquesPHPWeb ShellsInput ValidationSocial EngineeringPost ExploitationHost Header InjectionPassword Reset PoisoningHTTP HeadersGraphQLSchema IntrospectionAuthorization BypassInjectionWeb EnumerationSSHPassword CrackingLinux SecurityCVE ExploitationCryptographyXORKnown-Plaintext AttackHex EncodingMYSQLIRCESSTIFlask SecuritySSH Brute ForceDatabase EnumerationHash CrackingYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationFile Processing SecurityJWTClaims ManipulationAuthentication BypassTime-Based AttacksSignature CrackingAlgorithm ConfusionRS256HS256Token ForgeryCryptanalysisClassical CryptoPattern RecognitionData EncodingLogic FlawParameter ManipulationSQL InjectionDatabase SecurityToken AuthenticationSteganographyImage AnalysisLSBForensicsPythonMemory ForensicsBinary AnalysisDigital ForensicsIncident ResponseTool UsageData RecoveryROT13 EncodingWeb HackingLogic FlawsToken ManipulationBase64 EncodingSession ManagementAuthenticationTransposition CipherRail FenceLFIPath ManipulationFile InclusionWEBApache TomcatWAR DeploymentDefault CredentialsLinuxSudoServer-Side Template InjectionJinja2Web Application TestingCode InjectionGit ForensicsVersion Control SecurityRepository AnalysisPenetration TestingSecret RecoveryOSINTGITJinja2 ExploitationBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXSSCross-Site ScriptingStored XSSSession HijackingJavaScriptClient-Side SecurityDOM ManipulationPickle DeserializationCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementNoSQL InjectionMongoDBDocument DatabasesRace ConditionsTiming AttacksConcurrent ExploitationVisibility ControlsAccess Control BypassSecurity TestingOperator ExploitationSUID BinariesBinary ExploitationFilter EvasionJWT ManipulationSSH ExploitationLog InjectionFile Upload BypassPHP SecurityWeb Shell ExploitationLinux Privilege EscalationFile PermissionsXXEXML SecurityFile DisclosureExternal EntityShell CommandsHTTP Parameter ManipulationSecurity AssessmentIP SpoofingInformation GatheringPDF SecurityDictionary AttacksDocument SecurityBrute Force AttacksQR Code AnalysisData ExtractionAudio AnalysisKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsClassical CiphersHistorical CryptanalysisWiFi SecurityWPA CrackingWireless Penetration TestingNetwork SecurityPacket AnalysisWireless SecurityWEP CrackingRC4 AnalysisCryptographic AttacksLegacy Protocol ExploitationUnicodeWeb ForensicsText AnalysisOAuth 2.0Web ReconConfiguration ExploitsCookie ManipulationFlaskDebug ModeMemory AnalysisBlockchain AnalysisBitcoinOP_RETURNHex DecodingForensic AnalysisJenkinsCI/CDDevOpsPentestAutomationBase64Web InspectionBrowser DevToolsHTML AnalysisOffice SecurityHash ExtractionJohn the RipperHashcatZIP Password CrackingfcrackzipBrute ForceArchive SecurityService DiscoveryDatabase ForensicsCLI UsageRedishashcatWindows SecurityNTLMHash AnalysisNetwork AnalysisDNSData ExfiltrationBase64 DecodingWindows RegistryPersistence AnalysisMalware AnalysisFile DiscoveryReconnaissanceFilter BypassApache AuthenticationPolyalphabetic CiphersPath TraversalCGIFile AccessDeobfuscationCode AnalysisFrequency AnalysisLDAP InjectionDirectory ServicesSecurity BypassClient-Side ManipulationEmail ForensicsHeader AnalysisPhishing DetectionDigital InvestigationFile EnumerationCron JobsConfiguration AnalysisHex EditorsData StructuresReverse EngineeringFile AnalysisWebCTF BasicsWeb DevelopmentHexadecimalPacket CaptureWiresharkProtocol AnalysisSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2Command Line ToolsHTTP ProtocolAttack DetectionMD5Rainbow TablesNetwork ForensicsDNS AnalysisTraffic AnalysisWebDAV ExploitationRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationMD5 CrackingSource Code AnalysisPassword AttacksPath InjectionFile System SecurityPDF ForensicsMetadataHidden DataForensic ToolsURL ManipulationInternal Network AccessProtocol BypassCommand LineFile System NavigationHidden FilesgrepfindCSSMedia QueriesSource AnalysisDevToolsRequest SmugglingDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoveryPassword AnalysisSecurity ToolsType JugglingIDORAccess ControlFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationIP SPOOFINGFTPNmapNmap CommandsTelnetPort ScanningCookie PoisoningSession TamperingSecurity Through ObscurityView SourceBroken Access ControlHTMLView Source CodeBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
Internal
Hard
Redis Cache Poisoner
Challenge
Prototype Pollution Hunter
Challenge
Corporate Backup Deserializer
Challenge
LFI Log Poison
Challenge
File Upload Bypass
Challenge
Host Hijack
Medium
GraphQL Gateway
Challenge
TechNova Infiltration
Medium
XOR Reuse
Challenge
Query Quake
Medium
FortiPy
Hard
YAML Bomb
Challenge
JWT Claims Manipulation
Challenge
JWT Algo Confusion
Challenge
Crypto Cipher
Challenge
API Logic Flaw
Challenge
Auth Bypass
Challenge
JWT Bypass
Challenge
Pixel Puzzler
Challenge
Memory Forensics
Challenge
API Breaker
Challenge
Session Switch
Challenge
Rail Fence
Challenge
Corporate Breach 2
Challenge
Corporate Breach
Challenge
AlVault
Medium
Beyond Echo
Medium
Compromised 1
Medium
Template Injection
Challenge
Git Secrets Hunter
Challenge
Traversed
Medium
Template Injector
Challenge
SQL Injection
Challenge
XSS Playground
Challenge
Pickle Jar
Medium
CSRF Bank Transfer
Challenge
MongoDB Injector
Challenge
Race Condition Hunter
Challenge
NoSQL Injection
Challenge
SUID Privilege Hunter
Challenge
RCE Playground
Medium
Infiltrator
Easy
FiPloit
Easy
Alpwned
Medium
XXE Exposed
Challenge
Shell Command Scanner
Challenge
IP Spoofing Admin
Challenge
PDF Password Cracker
Challenge
QR Code Quest
Challenge
Sonic Cipher
Challenge
KeePass Breaker
Challenge
Book Cipher Challenge
Challenge
WiFi Password Cracker
Challenge
WEP Cracker
Challenge
Phantom Text
Challenge
Token Trust
Challenge
Cookie Forge
Challenge
Flask Error
Challenge
Blockchain Secrets
Challenge
Snapchat Exposed
Challenge
Base64 Detective
Challenge
Office Password Cracker
Challenge
ZIP Cracker
Challenge
Red is Dead
Challenge
Shadow Cracker
Challenge
Ping Pwn
Challenge
Hidden CMS Breach
Medium
Windows Password Cracker
Challenge
DNS Exfil
Challenge
Registry Hunter
Challenge
Backup Hunter
Challenge
File Include Bypass
Challenge
Vigenere Stego Hunt
Challenge
Path Traversal
Challenge
Hack This Site
Challenge
Button Activator
Challenge
Caesar Shift Decoder
Challenge
LDAP Injector
Challenge
Header Hijacker
Challenge
Cronpocalypse
Easy
Email Header Forensics
Challenge
SQL Injection Test
Challenge
Matsudo
Medium
Scheduled Sabotage
Easy
Binary Secrets
Challenge
Stego Hunt
Challenge
Hex Hunt
Challenge
Packet Pursuit
Challenge
URL Scanner
Challenge
Log Hunter
Challenge
Get the Password
Challenge
DNS Tunneling Detective
Challenge
WebDAV Explorer
Challenge
Registry Hijacker
Challenge
Admin Portal Breach
Challenge
Simple Directory Traversal
Challenge
PDF Trap
Challenge
SSRF Validator
Challenge
Linux Fundamentals Practice
Challenge
Fine Print
Challenge
HTTP Smuggling
Challenge
Corporate Directory Hunt
Challenge
Crack SHA1 Hash
Challenge
Type Juggling Bypass
Challenge
IDOR Explorer
Challenge
ClearDesk
Medium
Anonymous 2
Easy
Include me
Easy
Spoof!
Easy
Anonymous
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
OSINT and pretexting
Social engineering basics
Phishing attacks
Penetration testing careers
Bug bounty and freelance security
The cybersecurity industry
Governance, risk, and compliance
Digital forensics and incident response
Cloud and application security
Security operations and defense
Building your security portfolio
Landing your first security job
Building your security skill stack
Hydra Cheat Sheet
Nikto Cheat Sheet
John the Ripper Cheat Sheet
SQLMap Cheat Sheet
Wireshark Cheat Sheet
Burp Suite Cheat Sheet
Gobuster Cheat Sheet
Nmap Cheat Sheet
Hashcat Cheat Sheet
Metasploit Cheat Sheet
OSINT
10
Code OSINT
Image OSINT
Google dorking
OSINT fundamentals
Social media OSINT
Email OSINT
Domain recon
OSINT automation
Dark web OSINT
OSINT defense
Authentication mechanisms
Cookies and sessions
HTTP security headers
HTTP requests and responses
Browser DevTools for recon
HTTPS and TLS
Common web vulnerabilities
URLs, domains, and DNS
HTML and the browser
Same-origin policy and CORS
Hacking 101
10
The network underneath
Vulnerabilities and exploits
How passwords break
Encoding is not encryption
The hacker mindset
Your roadmap
Hacking humans
Hidden in plain sight
Open-source intelligence
The hacker's toolkit
Daily Hack Solved
- Tamper the token
+10 XP
18 hours ago
Task Completed
- WP Ultimate
1 day ago
Task Completed
- WP Ultimate
1 day ago
Task Completed
- WP Ultimate
1 day ago
Daily Hack Solved
- Find the RCE sink
+10 XP
1 day ago
Flag Found
- Internal
+350 XP
2 days ago
Flag Found
- Internal
+350 XP
2 days ago
Daily Hack Solved
- Pivot to the database
+10 XP
3 days ago
Flag Found
- Redis Cache Poisoner
+50 XP
3 days ago
Daily Hack Solved
- Find the hidden admin page
+10 XP
4 days ago
Chapter Completed
- Phishing attacks
+1 XP
4 days ago
Flag Found
- Prototype Pollution Hunter
+50 XP
4 days ago
Flag Found
- Corporate Backup Deserializer
+50 XP
4 days ago
Flag Found
- LFI Log Poison
+50 XP
4 days ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
5 days ago
Flag Found
- Mythos Leak - Headless CMS Draft Exposure
+200 XP
5 days ago
Daily Hack Solved
- Forge the admin role
+10 XP
5 days ago
Chapter Completed
- OSINT and pretexting
+1 XP
5 days ago
Flag Found
- File Upload Bypass
+50 XP
5 days ago
Flag Found
- Host Hijack
+200 XP
5 days ago
Flag Found
- Host Hijack
+200 XP
5 days ago
Daily Hack Solved
- Reach the internal service
+10 XP
5 days ago
Flag Found
- GraphQL Gateway
+50 XP
6 days ago
Flag Found
- TechNova Infiltration
+200 XP
6 days ago
Flag Found
- TechNova Infiltration
+200 XP
6 days ago
Flag Found
- XOR Reuse
+50 XP
6 days ago
Chapter Completed
- Social engineering basics
+1 XP
6 days ago
Flag Found
- Query Quake
+200 XP
6 days ago
Flag Found
- Query Quake
+200 XP
6 days ago
Chapter Completed
- OSINT defense
+1 XP
6 days ago
Lesson Completed
+16 XP
6 days ago
Lesson Completed
+11 XP
6 days ago
Lesson Completed
+5 XP
6 days ago
Flag Found
- FortiPy
+350 XP
6 days ago
Flag Found
- FortiPy
+350 XP
6 days ago
Chapter Completed
- OSINT automation
+1 XP
6 days ago
Flag Found
- YAML Bomb
+50 XP
6 days ago
Lesson Completed
+16 XP
6 days ago
Lesson Completed
+11 XP
6 days ago
Lesson Completed
+5 XP
6 days ago
Flag Found
- JWT Claims Manipulation
+50 XP
6 days ago
Daily Hack Solved
- Crack the reset token
+10 XP
6 days ago
Flag Found
- JWT Algo Confusion
+50 XP
1 week ago
Flag Found
- Crypto Cipher
+50 XP
1 week ago
Chapter Completed
- Code OSINT
+1 XP
1 week ago
Lesson Completed
+15 XP
1 week ago
Lesson Completed
+11 XP
1 week ago
Lesson Completed
+5 XP
1 week ago
Flag Found
- API Logic Flaw
+50 XP
1 week ago
Chapter Completed
- Dark web OSINT
+1 XP
1 week ago