Skills catalog

Full index of indexed skills. Each entry leads to a page with machines that practice the technique + curated resources + related skills.

Skills catalog

Full index of indexed skills. Each entry leads to a page with machines that practice the technique + curated resources + related skills.

Skill	HTB · Machines	PortSwigger · Labs	TryHackMe · Rooms
Remote Code Execution (RCE)	104	15	103
Information Leakage	74	6	—
SQL Injection	36	22	20
Cross-Site Scripting (XSS)	13	36	10
Cracking Hashes (hashcat / John)	25	—	22
Port Forwarding / Pivoting	36	—	4
USB forensics	1	—	39
Authentication Vulnerabilities	4	27	2
Directory fuzzing	13	—	19
Active Directory	12	—	18
File Upload Vulnerabilities	16	8	4
SMB (139/445)	16	—	12
Local File Inclusion (LFI)	19	—	8
OS Command Injection	17	5	5
Server-Side Request Forgery	10	11	4
Access Control / IDOR	1	14	9
SSTI (Server-Side Template Injection)	12	7	5
Web Cache Attacks (Poisoning / Deception)	—	21	1
Brute Force / Rate-Limit Bypass	12	1	8
Insecure Deserialization	10	10	1
WordPress Exploitation	13	—	8
Buffer Overflow (BoF / ROP)	12	—	8
HTTP Request Smuggling	1	16	3
SUID binaries	12	—	8
CSRF (Cross-Site Request Forgery)	2	15	2
XML External Entity	6	9	4
JSON Web Tokens (JWT)	10	8	—
Directory / Path Traversal	4	8	5
Race Conditions	3	7	6
Subdomain Enumeration	14	—	2
Business Logic Vulnerabilities	—	12	—
BloodHound	10	—	1
IIS (Microsoft Web Server)	8	—	3
Prototype Pollution	1	9	1
LLM Attacks (Prompt Injection)	—	8	2
OAuth Authentication Vulnerabilities	1	6	1
GraphQL Vulnerabilities	1	5	1
Kerberoasting	5	—	2
Remote File Inclusion (RFI)	4	—	2
SNMP Enumeration	5	—	1
Steganography (Stego)	4	—	2
API Testing	—	5	—
AS-REP Roasting	2	—	3
Clickjacking	—	5	—
DNS zone transfer	4	—	1
HTTP Host Header Attacks	—	5	—
WebSockets Vulnerabilities	1	2	2
Default credentials	1	—	3
GetNPUsers (Impacket)	4	—	—
Shellshock (CVE-2014-6271)	3	1	—
Sudo abuse	1	—	3
CORS (Cross-Origin Resource Sharing)	—	3	—
Cron abuse	3	—	—
DCSync	3	—	—
EternalBlue (MS17-010)	2	—	1
linPEAS	1	—	2
Type Juggling / Confusion	3	—	—
WebDAV	3	—	—
winPEAS	3	—	—
Pi-hole default credentials	2	—	—
Redis Exploitation	2	—	—
Anonymous FTP	—	—	1
AutoLogon credentials	1	—	—
Elastix LFI	1	—	—
Group Policy Preferences (GPP)	1	—	—
HttpFileServer (CVE-2014-6287)	1	—	—
MS08-067 (NetAPI)	—	—	1
pfSense	1	—	—
phpbash (PHP web shell)	1	—	—
Samba 3.0.20 RCE (CVE-2007-2447)	1	—	—

Last updated: 2026-06-07