yemingsh
Junior
New bird~
Activity
33 active days in the last yearRank Progress
Junior
Senior
1849 / 2114 XP
Achievements
Streak Starter
Lab Rat
Scholar
Pro Member
IDORAPI SecurityPath TraversalAccess ControlPrivilege EscalationClient-Side SecurityMD5 CrackingSource Code AnalysisWeb Application SecurityPassword AttacksAuthentication BypassPHPLFIIP SPOOFINGFTPSecurity Through ObscurityBrowser DevToolsView SourceInformation DisclosureBroken Access ControlWeb SecurityHTMLCookie PoisoningSession TamperingBase64 EncodingWeb ExploitationView Source CodeNmapNmap CommandsTelnetPort ScanningNetwork ReconnaissanceBroken AuthenticationDeveloper ToolsLearning PathCapture The FlagCTFCTF BasicsFlag SubmissionUUIDGetting StartedCyber Security Fundamentals
ClearDesk
Medium
Admin Portal Breach
Challenge
Include me
Easy
Spoof!
Easy
Anonymous
Easy
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Campaign automation
OSINT and pretexting
Vishing attacks
Malicious payloads
Detection evasion
Smishing attacks
Burp Suite
10
Sessions, cookies and tokens
Browser and certificate setup
Target scope and site map
Decoder and Comparer
Your first intercepted request
Repeater and request tampering
Burp Suite and HTTP proxies
A complete Burp workflow
Extensions and the BApp Store
Intruder and payload positions
From scripts to exploits
A recon tool
Parsing and regex
Strings and data
Why Python for security
Sockets and port scanning
Logic and loops
Hashing and encoding
Web requests with Python
Functions and files
Kali Linux
10
Installation and virtualization
First boot and updates
Reconnaissance tools
The Kali distribution
Exploitation tools
Desktop and shell
Your practice lab
The pentest workflow
Web and password tools
The Kali toolset
Pipes and data pipelines
Users, groups, and permissions
Filesystem navigation
Environment and package management
Searching for what matters
Reading and manipulating files
Your first terminal session
Network commands
OSINT
10
Code OSINT
Image OSINT
Google dorking
OSINT fundamentals
Social media OSINT
Email OSINT
Domain recon
OSINT automation
Dark web OSINT
OSINT defense
SOC Analyst
10
SOC fundamentals
Detection engineering with Sigma
Network detection
MITRE ATT&CK mapping
Log analysis with queries
Windows telemetry detection
Log sources and SIEM
Threat intelligence
Threat hunting
SOC operations and metrics
AI Security
10
Jailbreaks and guardrail bypass
Prompt injection attacks
LLM application defense
Indirect prompt injection
RAG and embedding attacks
Insecure output handling
Sensitive information disclosure
LLM application architecture
AI and LLM security fundamentals
LLM agents and tool abuse
YARA and Sigma detections
Threat hunting foundations
MITRE ATT&CK hunting
Threat intelligence fundamentals
The hunt program
IOCs, feeds and platforms
Endpoint and network hunting
The hunt loop
Hacking 101
10
The network underneath
Vulnerabilities and exploits
How passwords break
Encoding is not encryption
The hacker mindset
Your roadmap
Hacking humans
Hidden in plain sight
Open-source intelligence
The hacker's toolkit
Cryptography
10
Key exchange and randomness
Hash functions and collisions
Substitution ciphers
Cryptography in the wild
RSA fundamentals
Block cipher modes
XOR cryptanalysis
The Vigenere cipher
Encoding and encryption
RSA attacks
Password fundamentals
Dictionary attacks
QR codes and visual encodings
Steganography foundations
Penetration testing careers
Bug bounty and freelance security
The cybersecurity industry
Governance, risk, and compliance
Digital forensics and incident response
Cloud and application security
Security operations and defense
Building your security portfolio
Landing your first security job
Building your security skill stack
Hydra Cheat Sheet
Nikto Cheat Sheet
John the Ripper Cheat Sheet
SQLMap Cheat Sheet
Wireshark Cheat Sheet
Burp Suite Cheat Sheet
Gobuster Cheat Sheet
Nmap Cheat Sheet
Hashcat Cheat Sheet
Metasploit Cheat Sheet
Web Security Intro
Quick wins
Hunting setup
Hunting methodology
Recon fundamentals
Report writing
GCP enumeration
Cloud defense
Azure exploitation
Azure enumeration
Serverless security
Cloud containers
AWS privilege escalation
GCP exploitation
AWS enumeration
Cloud security basics
Authentication mechanisms
Cookies and sessions
HTTP security headers
HTTP requests and responses
Browser DevTools for recon
HTTPS and TLS
Common web vulnerabilities
URLs, domains, and DNS
HTML and the browser
Same-origin policy and CORS
Active for 1 days
5 days ago
Daily Hack Solved
- The address the signers never saw
+10 XP
5 days ago
Chapter Completed
- The hunt program
+1 XP
5 days ago
Chapter Completed
- YARA and Sigma detections
+1 XP
5 days ago
Chapter Completed
- IOCs, feeds and platforms
+1 XP
5 days ago
Chapter Completed
- Threat intelligence fundamentals
+1 XP
5 days ago
Chapter Completed
- Endpoint and network hunting
+1 XP
5 days ago
Chapter Completed
- MITRE ATT&CK hunting
+1 XP
5 days ago
Chapter Completed
- The hunt loop
+1 XP
5 days ago
Chapter Completed
- Threat hunting foundations
+1 XP
5 days ago
Chapter Completed
- Cryptography in the wild
+1 XP
5 days ago
Chapter Completed
- Key exchange and randomness
+1 XP
5 days ago
Chapter Completed
- RSA attacks
+1 XP
5 days ago
Chapter Completed
- RSA fundamentals
+1 XP
5 days ago
Chapter Completed
- Block cipher modes
+1 XP
5 days ago
Chapter Completed
- Hash functions and collisions
+1 XP
5 days ago
Chapter Completed
- The Vigenere cipher
+1 XP
5 days ago
Chapter Completed
- Substitution ciphers
+1 XP
5 days ago
Chapter Completed
- Encoding and encryption
+1 XP
5 days ago
Chapter Completed
- XOR cryptanalysis
+1 XP
5 days ago
Chapter Completed
- LLM application defense
+1 XP
1 week ago
Chapter Completed
- Insecure output handling
+1 XP
1 week ago
Chapter Completed
- LLM agents and tool abuse
+1 XP
1 week ago
Chapter Completed
- RAG and embedding attacks
+1 XP
1 week ago
Chapter Completed
- Sensitive information disclosure
+1 XP
1 week ago
Chapter Completed
- Jailbreaks and guardrail bypass
+1 XP
1 week ago
Daily Hack Solved
- The model that phoned home
+10 XP
1 week ago
Chapter Completed
- Indirect prompt injection
+1 XP
1 week ago
Chapter Completed
- Prompt injection attacks
+1 XP
1 week ago
Chapter Completed
- LLM application architecture
+1 XP
1 week ago
Chapter Completed
- AI and LLM security fundamentals
+1 XP
1 week ago
Daily Hack Solved
- The captcha that filled your clipboard
+10 XP
1 week ago
Chapter Completed
- SOC operations and metrics
+1 XP
1 week ago
Chapter Completed
- Threat intelligence
+1 XP
1 week ago
Chapter Completed
- Threat hunting
+1 XP
1 week ago
Chapter Completed
- Detection engineering with Sigma
+1 XP
1 week ago
Chapter Completed
- MITRE ATT&CK mapping
+1 XP
1 week ago
Chapter Completed
- Network detection
+1 XP
1 week ago
Chapter Completed
- Windows telemetry detection
+1 XP
1 week ago
Chapter Completed
- Log analysis with queries
+1 XP
1 week ago
Chapter Completed
- Log sources and SIEM
+1 XP
1 week ago
Chapter Completed
- SOC fundamentals
+1 XP
1 week ago
Chapter Completed
- Cloud defense
+1 XP
1 week ago
Chapter Completed
- Cloud containers
+1 XP
1 week ago
Chapter Completed
- Serverless security
+1 XP
1 week ago
Chapter Completed
- GCP exploitation
+1 XP
1 week ago
Chapter Completed
- GCP enumeration
+1 XP
1 week ago
Chapter Completed
- Azure exploitation
+1 XP
1 week ago
Chapter Completed
- Azure enumeration
+1 XP
1 week ago
Chapter Completed
- AWS privilege escalation
+1 XP
1 week ago