OWASP LLM Top 10
+5 XP
Category
Penetration Testing
End-to-end pentest methodology covering networks, web apps, and increasingly AI features. Real engagement workflows from Lokesh Singh aka Mr Elite.
221 articles
Ethical Hacking Course
+5 XP
Scheduled Tasks & Cron Jobs 2026 — Creating Persistent Backdoors via Task Schedulers | Hacking Course Day 39
Windows Task Scheduler and Linux cron are running on every machine you'll ever test. Here's how attackers weaponise both to…
Command Injection
+5 XP
Command Injection Payloads That Bypass WAF in 2026 — Real Bypass List
Real WAF bypass via command injection payloads in 2026. I've tested every technique here — encoding tricks, wildcards, IFS abuse.…
Ethical Hacking Course
+5 XP
Registry Persistence 2026 — Run Keys, COM Hijacking & Boot Execute | Hacking Course Day 38
Three registry persistence mechanisms that survive reboots, AV scans, and incident response. This is what separates a temporary foothold from…
Metasploitable Labs
+5 XP
Metasploitable Lab Setup 2026 — VirtualBox, Isolated Network & First Connection | Hacking Lab 31
Metasploitable Lab Setup in VirtualBox 2026 with an isolated host-only network, confirm all 20 vulnerable services are running, and connect…
Prompt Injection
+5 XP
AI Application API Key Theft via Prompt Injection 2026 — Credential Extraction Attacks
How prompt injection enables API key theft from AI applications in 2026. Complete attack chains from user input to stolen…
AI LLM Hacking Course
+5 XP
LLM01 Prompt Injection 2026 — Complete Attack Guide | AI LLM Hacking Course Day4
Master LLM01 prompt injection in 2026. Direct injection, indirect injection, jailbreaks, filter bypasses and bug bounty payloads — complete OWASP…
DVWA Labs
+5 XP
DVWA Complete Pentest Challenge 2026 — Full Assessment From Scratch, No Hints | Hacking Lab 30
The DVWA series finale — a complete unsupported pentest challenge across all modules. No hints, no steps, just methodology and…
Prompt Injection
+5 XP
Prompt Injection in Agentic Workflows 2026 — When AI Agents Act on Malicious Instructions
How prompt injection attacks hijack agentic AI workflows in 2026. Multi-agent chains, autonomous task manipulation, and real-world attack scenarios.
eJPT Certification 2026 — Is It Worth It, How Hard Is It, and Who Should Skip It
Honest 2026 review of the eJPT certification. Exam difficulty, employer value, cost, who should take it vs skip it, and…