Zero404
Grandmaster
Activity
135 active days in the last year
Less
More
Rank Progress
Grandmaster
✦ Legend ✦
13267 / 15784 XP
Achievements
First Blood
Blood Hunter
Streak Starter
Streak Master
Lab Rat
Lab Expert
Lab Master
Scholar
Top 10
GitVersion ControlSource Code AnalysisReconnaissanceWeb SecurityWeb EnumerationFile DiscoveryInformation GatheringPHPType JugglingAuthentication BypassHash AnalysisCryptographyHash CrackingPassword AnalysisSecurity ToolsJavaScriptDeobfuscationClient-Side SecurityBrowser DevToolsCode AnalysisSQL InjectionDatabase SecurityInput ValidationPenetration TestingWeb Application SecuritySSTIFlask SecuritySSH Brute ForceDatabase EnumerationPrivilege EscalationSteganographyClassical CiphersImage AnalysisPolyalphabetic CiphersDirectory TraversalPath InjectionFile System SecurityPath ManipulationFile AccessYAML DeserializationPyYAML ExploitationConfiguration InjectionPython SecurityUnsafe DeserializationRemote Code ExecutionFile Processing SecurityWebDAV ExploitationFile UploadRemote File AccessHTTP MethodsWeb Server SecurityFile System EnumerationPrototype PollutionNode.js SecurityAPI SecurityJavaScript ExploitationObject ManipulationInput Validation BypassModern Web VulnerabilitiesRace ConditionsTiming AttacksConcurrent ExploitationIDORParameter ManipulationAuthorization BypassLocal File InclusionFilter BypassApache AuthenticationPassword CrackingHTTP HeadersSecurity BypassClient-Side ManipulationDirectory EnumerationWeb ReconnaissanceAdministrative Panel DiscoverySecurity AssessmentJWTCookie ManipulationDOM ManipulationGraphQLSchema IntrospectionInjectionNetwork ForensicsDNS AnalysisData ExfiltrationTraffic AnalysisFrequency AnalysisPattern RecognitionDocker Registry APIContainer SecurityAPI ManipulationRegistry ExploitationSUID BinariesCommand InjectionLinux SecurityBinary ExploitationNoSQL InjectionMongoDBDocument DatabasesLDAP InjectionDirectory ServicesEnterprise SecurityJWT ManipulationSSH ExploitationLog InjectionServer-Side Template InjectionJinja2 ExploitationIP SpoofingAccess Control BypassWireless SecurityWEP CrackingRC4 AnalysisPacket AnalysisCryptographic AttacksLegacy Protocol ExploitationDigital ForensicsWindows RegistryPersistence AnalysisBase64 DecodingIncident ResponseMalware AnalysisWiFi SecurityWPA CrackingDictionary AttacksWireless Penetration TestingNetwork SecurityHistorical CryptanalysisMD5 CrackingPassword AttacksGit ForensicsVersion Control SecurityRepository AnalysisSecret RecoveryOSINTPython PickleEnterprise DeserializationCorporate Backup SystemsDisaster Recovery ExploitationConfiguration Import AttacksZIP Password CrackingJohn the RipperfcrackzipBrute ForceArchive SecurityKeePass 4.x SecurityDirect Brute ForcePassword Manager AssessmentModern CryptographySecurity Tool LimitationsJinja2Web Application TestingCode InjectionPDF SecurityDocument SecurityBrute Force AttacksShell CommandsSystem AdministrationHTTP Parameter ManipulationUser-Agent Log PoisoningApache SecurityLog AnalysisVisibility ControlsSecurity TestingOperator ExploitationBypass TechniquesWeb ShellsSocial EngineeringPost ExploitationCSRFCross-Site Request ForgerySession SecurityForm SecurityHTTP SecurityState ManagementSSRFServer-Side Request ForgeryAWS MetadataCloud SecurityIAM CredentialsAWS EC2Logic FlawClaims ManipulationTime-Based AttacksSignature CrackingXSSCross-Site ScriptingStored XSSSession HijackingSSHLinux Privilege EscalationFile PermissionsBlind SQLiTime-based SQLiBoolean-based SQLiVulnerability AssessmentXXEXML SecurityFile DisclosureExternal EntityAlgorithm ConfusionRS256HS256Token ForgeryToken AuthenticationWeb ExploitationService DiscoveryCommand Line ToolsForensicsHTTP ProtocolAttack DetectionPath TraversalCGIFlaskDebug ModePythonMemory AnalysisTransposition CipherRail FenceAudio AnalysisLSBPDF ForensicsFile AnalysisMetadataHidden DataForensic ToolsLFIFile InclusionBlockchain AnalysisBitcoinOP_RETURNHex DecodingData ExtractionForensic AnalysisNetwork AnalysisDNSCryptanalysisClassical CryptoData EncodingJenkinsCI/CDDevOpsPentestAutomationSession ManagementAuthenticationNetwork ReconnaissanceDatabase ForensicsCLI UsageData RecoveryBase64Hex EncodingRedisMemory ForensicsBinary AnalysisTool UsageROT13 EncodingWeb HackingLogic FlawsToken ManipulationBase64 EncodingQR Code AnalysisWeb InspectionHTML AnalysisHex EditorsData StructuresReverse EngineeringMD5Rainbow TablesWeb DevelopmentPacket CaptureWiresharkProtocol AnalysisWebCTF BasicsHexadecimalFile Upload BypassPHP SecurityWeb Shell ExploitationWEBIDOR ExploitationZip Slip VulnerabilityInternal Service DiscoveryBackup Service ExploitationSudo Vim ExploitationCookie PoisoningSession TamperingBroken AuthenticationDeveloper ToolsLearning PathNmapNmap CommandsTelnetPort ScanningLinux CapabilitiesReverse ShellSystem EnumerationWPAdvanced ReconnaissanceAndroid Reverse EngineeringSCADA ExploitationCVE ExploitationMYSQLIRCECapture The FlagCTFFlag SubmissionUUIDGetting StartedCyber Security FundamentalsGITLinuxSudoIP SPOOFINGFTP ExploitationBackdoor DetectionNetwork ServicesRemote ShellSystem ExploitationFTPApache TomcatWAR DeploymentDefault CredentialsView Source CodeHTMLInformation DisclosureBroken Access Control
Git Exposed
Challenge
Backup Hunter
Challenge
Type Juggling Bypass
Challenge
Crack SHA1 Hash
Challenge
Hack This Site
Challenge
SQL Injection Test
Challenge
FortiPy
Hard
Vigenere Stego Hunt
Challenge
Simple Directory Traversal
Challenge
YAML Bomb
Challenge
WebDAV Explorer
Challenge
Prototype Pollution Hunter
Challenge
Race Condition Hunter
Challenge
IDOR Explorer
Challenge
File Include Bypass
Challenge
Header Hijacker
Challenge
Corporate Directory Hunt
Challenge
Cookie Forge
Challenge
Button Activator
Challenge
GraphQL Gateway
Challenge
DNS Tunneling Detective
Challenge
Caesar Shift Decoder
Challenge
Registry Hijacker
Challenge
SUID Privilege Hunter
Challenge
MongoDB Injector
Challenge
LDAP Injector
Challenge
Infiltrator
Easy
Template Injector
Challenge
IP Spoofing Admin
Challenge
WEP Cracker
Challenge
Registry Hunter
Challenge
WiFi Password Cracker
Challenge
Book Cipher Challenge
Challenge
Admin Portal Breach
Challenge
Git Secrets Hunter
Challenge
Corporate Backup Deserializer
Challenge
ZIP Cracker
Challenge
KeePass Breaker
Challenge
Template Injection
Challenge
PDF Password Cracker
Challenge
Shell Command Scanner
Challenge
LFI Log Poison
Challenge
NoSQL Injection
Challenge
File Upload Bypass
Challenge
CSRF Bank Transfer
Challenge
URL Scanner
Challenge
API Logic Flaw
Challenge
JWT Claims Manipulation
Challenge
XSS Playground
Challenge
Alpwned
Medium
SQL Injection
Challenge
XXE Exposed
Challenge
JWT Algo Confusion
Challenge
JWT Bypass
Challenge
Auth Bypass
Challenge
Ping Pwn
Challenge
Log Hunter
Challenge
Path Traversal
Challenge
Flask Error
Challenge
Rail Fence
Challenge
Sonic Cipher
Challenge
Pixel Puzzler
Challenge
PDF Trap
Challenge
Corporate Breach 2
Challenge
Blockchain Secrets
Challenge
Corporate Breach
Challenge
DNS Exfil
Challenge
Crypto Cipher
Challenge
Snapchat Exposed
Challenge
Session Switch
Challenge
Red is Dead
Challenge
Memory Forensics
Challenge
API Breaker
Challenge
QR Code Quest
Challenge
Base64 Detective
Challenge
Binary Secrets
Challenge
Get the Password
Challenge
Packet Pursuit
Challenge
Stego Hunt
Challenge
Hex Hunt
Challenge
FiPloit
Easy
AlVault
Medium
Broken Chain
Hard
Hack the Cookie: Cookie Poisoning Attack
Very Easy
Hack the Login
Very Easy
Cronpocalypse
Easy
Internal
Hard
WP Ultimate
Hard
Compromised 2
Hard
Query Quake
Medium
Traversed
Medium
Matsudo
Medium
Beyond Echo
Medium
Include me
Easy
Spoof!
Easy
Anonymous 2
Easy
Anonymous
Easy
Compromised 1
Medium
Installing Nmap
Advanced Techniques
Introduction to Nmap
Essential Nmap Scanning
Remediate
Techniques for IP Spoofing in HTTP Headers
Manipulating Headers
Rainbow tables
PDF cracking
Brute force attacks
Password fundamentals
Dictionary attacks
1. Legal & Compliance
2. Network Protocols and Security
4. Network Scanning
3. Reconnaissance
Course Summary
CSRF Attacks
XXE Injection
SSRF
File Inclusion
Web Security Intro
SSTI
Deserialization
File Upload Attacks
XSS Attacks
Auth Bypass
SQL Injection
Command Injection
Shellshock (CVE-2014-6271)
RCE: Introduction
RCE in PHP
Active for 1 days
6 months ago
Flag Found
- TechNova Infiltration
+200 XP
6 months ago
Active for 9 days
7 months ago
Flag Found
- Git Exposed
+50 XP
7 months ago
Active for 1 days
7 months ago
Flag Found
- Backup Hunter
+50 XP
7 months ago
Active for 2 days
7 months ago
Flag Found
- Type Juggling Bypass
+50 XP
7 months ago
Flag Found
- Crack SHA1 Hash
+50 XP
7 months ago
Active for 3 days
7 months ago
Flag Found
- Hack This Site
+50 XP
8 months ago
Flag Found
- SQL Injection Test
+50 XP
8 months ago
Active for 4 days
8 months ago
Flag Found
- FortiPy
+350 XP
8 months ago
Flag Found
- FortiPy
+350 XP
8 months ago
Flag Found
- Vigenere Stego Hunt
+50 XP
8 months ago
Flag Found
- Simple Directory Traversal
+50 XP
8 months ago
Flag Found
- YAML Bomb
+50 XP
8 months ago
Flag Found
- WebDAV Explorer
+50 XP
8 months ago
Active for 3 days
8 months ago
Flag Found
- Prototype Pollution Hunter
+50 XP
8 months ago
Flag Found
- Race Condition Hunter
+50 XP
8 months ago
Flag Found
- IDOR Explorer
+50 XP
8 months ago
Active for 1 days
8 months ago
Flag Found
- File Include Bypass
+50 XP
8 months ago
Flag Found
- Header Hijacker
+50 XP
8 months ago
Flag Found
- Corporate Directory Hunt
+50 XP
8 months ago
Active for 3 days
8 months ago
Flag Found
- Cookie Forge
+50 XP
8 months ago
Flag Found
- Button Activator
+50 XP
8 months ago
Flag Found
- GraphQL Gateway
+50 XP
8 months ago
Flag Found
- DNS Tunneling Detective
+50 XP
8 months ago