0%

MFC·HACK LAB // by ghotnetmfc

Mis máquinas VPN

Login

Punto de Partida Máquinas Rankings Pro Labs CTF Labs Pawned Fortaleza

A01 – Broken Access Control (IDOR) A02 – Cryptographic Failures A03 – Command Injection A03 – SQL Injection A04 – Insecure Design A05 – Security Misconfiguration A06 – Vulnerable & Outdated Components A07 – Auth & Identification Failures A08 – Software & Data Integrity Failures A09 – Security Logging & Monitoring Failures A10 – Server-Side Request Forgery (SSRF)

2FA / MFA Bypass API Attacks – Laboratorio de APIs Inseguras Business Logic Flaws C2 – Sliver Command & Control CAPTCHA Bypass Clickjacking Cloud Storage Bucket Expuesto Container Escape CORS Misconfiguration CSRF – Cross-Site Request Forgery File Upload sin restricciones Forgot Password Recovery (Authentication Flaws) GraphQL Introspection & IDOR HTML Injection (GET/POST/Stored) Insecure Deserialization JWT Manipulation LDAP Anonymous Bind Login Bruteforce OAuth 2.0 Attacks Open Redirect Password Reset Poisoning Path Traversal / LFI Privilege Escalation (SSH) Race Condition / TOCTOU Reverse Shell Session Hijacking SSTI – Server-Side Template Injection XSS – Cross-Site Scripting XXE – XML External Entity

AI Agent – Tool Injection AI Jailbreak AI Supply Chain Poisoning Indirect Prompt Injection LLM Data Exfiltration Prompt Injection Prompt Leaking

Crear cuenta

Únete a MFC HACK LAB

Usuario

Email

Contraseña

Repite la contraseña

¿Ya tienes cuenta? Inicia sesión

MFC HACK LAB © · ghotnetmfc · Solo para uso educativo en entornos aislados

Resolución del laboratorio