Hackularity
Web
Web Fundamentals
Anatomy of Attacks
Operations
Infra
Infrastructure Fundamentals
Anatomy of Attacks
Operations
OSINT
OSINT Fundamentals
Investigation Anatomy
Operations
Log in
UA
EN
Operations
Pick a track: from the fundamentals to full compromise
Web
Infrastructure
OSINT
01
Flight School
Easy
info disclosure
forced browsing
param tampering
cookie decode
file exposure
HTTP headers
EXIF
0/7
02
Orbit
Easy → Medium
IDOR
broken auth
JWT
SQLi
SSRF
path traversal
mass assignment
0/7
03
Meridian
Medium → Hard
XSS
GraphQL
JWT confusion
NoSQLi
SSTI
proto pollution
deserialization
0/7
04
Apex
Hard → Expert
cache poisoning
cache deception
CORS
OAuth
race condition
request smuggling
proto RCE
0/7
05
Parallax
Expert
GraphQL aliasing
WS hijacking
cmd injection
SSRF
broken auth
XXE
sandbox escape
0/7
Confirm action
Password to confirm
Cancel
Confirm