https://hackergpt.org/about/ 2026-11-12T21:45:17.000Z weekly 0.8 https://hackergpt.org/blog/ 2026-11-12T00:00:00.000Z daily 0.8 https://hackergpt.org/contact/ 2026-11-12T21:45:17.000Z weekly 0.8 https://hackergpt.org/features/ 2026-11-12T21:45:17.000Z weekly 0.8 https://hackergpt.org/ 2026-11-12T21:45:17.000Z daily 1.0 https://hackergpt.org/legal-hacking/ 2026-11-05T23:50:53.000Z weekly 0.8 https://hackergpt.org/news/ 2026-11-09T21:26:00.000Z weekly 0.8 https://hackergpt.org/team/ 2026-11-12T21:45:17.000Z weekly 0.8 https://hackergpt.org/features/appmap/ 2026-11-05T23:30:30.000Z weekly 0.8 https://hackergpt.org/features/ctf-mode/ 2026-11-05T23:30:30.000Z weekly 0.8 https://hackergpt.org/features/cybergym/ 2026-11-12T19:34:26.000Z weekly 0.8 https://hackergpt.org/docs/ 2026-11-12T18:30:20.000Z weekly 0.8 https://hackergpt.org/docs/ctf/ 2026-11-12T18:30:20.000Z weekly 0.8 https://hackergpt.org/learn/ 2026-11-12T19:36:17.000Z weekly 0.8 https://hackergpt.org/learn/api-endpoint/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/learn/attack-surface-mapping/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/learn/bola/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/learn/broken-access-control/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/learn/ctf/ 2026-10-28T16:51:47.000Z weekly 0.8 https://hackergpt.org/learn/cve/ 2026-11-09T21:26:00.000Z weekly 0.8 https://hackergpt.org/learn/cvss/ 2026-11-09T21:26:00.000Z weekly 0.8 https://hackergpt.org/learn/deliberately-vulnerable-app/ 2026-11-05T23:30:30.000Z weekly 0.8 https://hackergpt.org/learn/idor/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/learn/osint/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/learn/owasp-top-10/ 2026-11-12T19:33:06.000Z weekly 0.8 https://hackergpt.org/learn/penetration-testing/ 2026-10-31T18:12:17.000Z weekly 0.8 https://hackergpt.org/learn/security-headers/ 2026-11-12T19:33:06.000Z weekly 0.8 https://hackergpt.org/learn/sql-injection/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/learn/xss/ 2026-10-27T19:57:21.000Z weekly 0.8 https://hackergpt.org/blog/topic/ai-pentesting/ 2026-11-12T20:15:47.000Z weekly 0.7 https://hackergpt.org/blog/topic/attack-surface/ 2026-11-12T20:15:47.000Z weekly 0.7 https://hackergpt.org/blog/topic/ctf/ 2026-11-12T20:15:47.000Z weekly 0.7 https://hackergpt.org/blog/topic/osint/ 2026-11-12T20:15:47.000Z weekly 0.7 https://hackergpt.org/blog/topic/practice-targets/ 2026-11-12T20:15:47.000Z weekly 0.7 https://hackergpt.org/blog/topic/saas-security/ 2026-11-12T20:15:47.000Z weekly 0.7 https://hackergpt.org/blog/topic/web-vulnerabilities/ 2026-11-12T20:15:47.000Z weekly 0.7 https://hackergpt.org/blog/ai-pentest-vs-manual-pentest/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/ai-pentest-vs-manual-pentest/cover.webp https://hackergpt.org/blog/backup-files-exposed-web-server/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/backup-files-exposed-web-server/cover.webp https://i.ytimg.com/vi/aCsUrP2IyGE/hqdefault.jpg CyberGym Challenge: Forgotten Developer Backup A tester finds a developer backup in a public CyberGym folder, works out why a file-type check blocks it and how that check can be misled, then HackerGPT tackles the same challenge. https://www.youtube-nocookie.com/embed/aCsUrP2IyGE 902 2026-09-11T06:31:08-07:00 https://hackergpt.org/blog/broken-authentication-examples/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/broken-authentication-examples/cover.webp https://hackergpt.org/blog/business-logic-vulnerabilities-examples/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/business-logic-vulnerabilities-examples/cover.webp https://hackergpt.org/blog/crypto-ctf-challenges-for-beginners/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/crypto-ctf-challenges-for-beginners/cover.webp https://hackergpt.org/blog/crypto-wallet-osint-ctf/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/crypto-wallet-osint-ctf/cover.webp https://hackergpt.org/blog/csrf-example/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/csrf-example/cover.webp https://hackergpt.org/blog/detect-attacks-in-web-server-logs/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/detect-attacks-in-web-server-logs/cover.webp https://hackergpt.org/blog/exposed-git-folder-env-file/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/exposed-git-folder-env-file/cover.webp https://hackergpt.org/blog/gdpr-data-export-vulnerability/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/gdpr-data-export-vulnerability/cover.webp https://i.ytimg.com/vi/Hl_Jt6lyrYg/hqdefault.jpg CyberGym Challenge: GDPR Data Theft A manual walkthrough of the GDPR Data Theft challenge on CyberGym, where a new account's data export returns another customer's orders. https://www.youtube-nocookie.com/embed/Hl_Jt6lyrYg 1486 2026-09-11T08:42:19-07:00 https://hackergpt.org/blog/how-to-learn-hacking/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/how-to-learn-hacking/cover.webp https://hackergpt.org/blog/how-to-write-a-ctf-writeup/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/how-to-write-a-ctf-writeup/cover.webp https://hackergpt.org/blog/intercept-mobile-app-traffic/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/intercept-mobile-app-traffic/cover.webp https://hackergpt.org/blog/jsonp-cross-origin-data-leak/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/jsonp-cross-origin-data-leak/cover.webp https://i.ytimg.com/vi/hcWUmnjP7mU/hqdefault.jpg CyberGym Challenge: Email Leak A tester watches CyberGym’s API traffic in Burp Suite, finds an endpoint that returns the signed-in user and shows that it also answers in a cross-domain JSONP format. https://www.youtube-nocookie.com/embed/hcWUmnjP7mU 658 2026-09-08T14:32:15-07:00 https://hackergpt.org/blog/juice-shop-retrieve-blueprint/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/juice-shop-retrieve-blueprint/cover.webp https://i.ytimg.com/vi/7fqOzVpsMm0/hqdefault.jpg CyberGym Challenge: Retrieve Blueprint A manual walkthrough of the Retrieve Blueprint challenge on CyberGym, following a product image's path to an exposed 3D model file. https://www.youtube-nocookie.com/embed/7fqOzVpsMm0 1195 2026-09-15T13:31:21-07:00 https://hackergpt.org/blog/jwt-vulnerabilities-examples/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/jwt-vulnerabilities-examples/cover.webp https://hackergpt.org/blog/leaked-seed-phrase-nft-takeover/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/leaked-seed-phrase-nft-takeover/cover.webp https://i.ytimg.com/vi/CxTNy9iYkOc/hqdefault.jpg CyberGym Challenge: NFT Takeover | Ethereum A manual walkthrough of the NFT Takeover challenge on CyberGym, where a seed phrase posted on a public page controls the wallet holding the shop's token. https://www.youtube-nocookie.com/embed/CxTNy9iYkOc 1153 2026-09-22T14:49:50-07:00 https://hackergpt.org/blog/open-redirect-example/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/open-redirect-example/cover.webp https://hackergpt.org/blog/osint-on-yourself/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/osint-on-yourself/cover.webp https://hackergpt.org/blog/password-osint-ctf-walkthrough/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/password-osint-ctf-walkthrough/cover.webp https://i.ytimg.com/vi/i7VPBIn_4qI/hqdefault.jpg CyberGym Challenge: Login McSafeSearch HackerGPT logs in to a CyberGym account by working out its password from hints in a music video the account owner published, without any injection or bypass. https://www.youtube-nocookie.com/embed/i7VPBIn_4qI 702 2026-09-16T04:33:05-07:00 https://hackergpt.org/blog/pentest-report-example/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/pentest-report-example/cover.webp https://hackergpt.org/blog/pentest-scope-template/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/pentest-scope-template/cover.webp https://hackergpt.org/blog/privilege-escalation-web-app/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/privilege-escalation-web-app/cover.webp https://hackergpt.org/blog/prompt-injection-examples/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/prompt-injection-examples/cover.webp https://hackergpt.org/blog/rate-limiting-test/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/rate-limiting-test/cover.webp https://hackergpt.org/blog/security-misconfiguration-examples/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/security-misconfiguration-examples/cover.webp https://hackergpt.org/blog/subdomain-enumeration/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/subdomain-enumeration/cover.webp https://hackergpt.org/blog/photo-geolocation-osint-ctf/ 2026-11-11T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/photo-geolocation-osint-ctf/cover.webp https://i.ytimg.com/vi/M7HI0fHcAoA/hqdefault.jpg CyberGym Challenge: Visual Geo Stalking A tester, then HackerGPT's CTF Mode, answer a CyberGym account's security question by reading workplace clues in a photo posted to the shop's Photo Wall. https://www.youtube-nocookie.com/embed/M7HI0fHcAoA 844 2026-09-16T04:09:18-07:00 https://hackergpt.org/blog/export-api-endpoints-postman-openapi/ 2026-11-10T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/export-api-endpoints-postman-openapi/cover.webp https://i.ytimg.com/vi/UFZ15BOdhdg/hqdefault.jpg Map every API endpoint on a web app in one minute (state graph + Postman export) HackerGPT maps CyberGym into a state graph and lists its API endpoints with their auth, ready to export to Postman or OpenAPI. https://www.youtube-nocookie.com/embed/UFZ15BOdhdg 51 2026-08-22T14:01:17-07:00 https://hackergpt.org/blog/cybersecurity-news-week-november-9-2026/ 2026-11-09T21:00:00.000Z weekly 0.6 https://hackergpt.org/blog/cybersecurity-news-week-november-9-2026/cover.webp https://hackergpt.org/blog/hardcoded-credentials-javascript-bundle/ 2026-11-09T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/hardcoded-credentials-javascript-bundle/cover.webp https://i.ytimg.com/vi/GTVLV_goZzo/hqdefault.jpg CyberGym Challenge: Exposed credentials Final A tester searches CyberGym’s client-side JavaScript in browser developer tools, finds a test account left in the code and confirms it still works, then HackerGPT tackles the same challenge. https://www.youtube-nocookie.com/embed/GTVLV_goZzo 654 2026-09-08T14:19:07-07:00 https://hackergpt.org/blog/nosql-injection-example-ctf/ 2026-11-08T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/nosql-injection-example-ctf/cover.webp https://i.ytimg.com/vi/S1VQiFJege0/hqdefault.jpg HackerGPT vs NoSQL Injection Challenge Solving CyberGym's NoSQL review-manipulation challenge by hand in Burp Suite and with HackerGPT, explaining how a MongoDB operator object turns one update into many. https://www.youtube-nocookie.com/embed/S1VQiFJege0 1669 2026-07-12T07:01:51-07:00 https://hackergpt.org/blog/osint-ctf-security-question-reset/ 2026-11-07T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/osint-ctf-security-question-reset/cover.webp https://i.ytimg.com/vi/yOXncuwokRw/hqdefault.jpg CyberGym Challenge: Reset Uvogin's Password A manual walkthrough resets a CyberGym account by recovering the answer to its security question through OSINT on a reused alias and an archived post, then HackerGPT's CTF Mode solves the same challenge. https://www.youtube-nocookie.com/embed/yOXncuwokRw 1140 2026-09-15T13:59:25-07:00 https://hackergpt.org/blog/exposed-directory-listing-sensitive-files/ 2026-11-06T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/exposed-directory-listing-sensitive-files/cover.webp https://i.ytimg.com/vi/kWB2Qvr0-uA/hqdefault.jpg CyberGym Challenge: Find Confidential Document A tester follows a file link on CyberGym to a publicly listed folder and finds an internal document in it, first by hand and then with HackerGPT. https://www.youtube-nocookie.com/embed/kWB2Qvr0-uA 1048 2026-09-08T13:41:25-07:00 https://hackergpt.org/blog/appmap-state-graph-guide/ 2026-11-05T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/appmap-state-graph-guide/cover.webp https://i.ytimg.com/vi/7_7EHM41ju0/hqdefault.jpg HackerGPT CTF Mode AppMap A short tour of AppMap's interactive state graph, its filters, and the details captured for each node. https://www.youtube-nocookie.com/embed/7_7EHM41ju0 78 2026-08-14T22:44:50-07:00 https://hackergpt.org/blog/sql-injection-example-ctf/ 2026-11-04T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/sql-injection-example-ctf/cover.webp https://i.ytimg.com/vi/0mkuySnpx68/hqdefault.jpg Learn SQL Injection by Solving Real CTF Challenge Solving CyberGym SQL injection challenges by hand in Burp Suite and with HackerGPT: confirming the injection point, UNION-based enumeration, and an authentication bypass. https://www.youtube-nocookie.com/embed/0mkuySnpx68 2968 2026-07-16T08:52:23-07:00 https://hackergpt.org/blog/xss-examples-dom-reflected-stored/ 2026-11-03T21:00:00.000Z weekly 0.6 https://hackergpt.org/blog/xss-examples-dom-reflected-stored/cover.webp https://i.ytimg.com/vi/_zTrEF0B880/hqdefault.jpg Cross-Site Scripting (XSS) CTF Walkthrough: DOM, Reflected & Stored XSS Explained Solving DOM, reflected and stored XSS challenges on CyberGym by hand and with HackerGPT, building each payload from the mechanism rather than copying it. https://www.youtube-nocookie.com/embed/_zTrEF0B880 2843 2026-07-24T07:05:08-07:00 https://hackergpt.org/blog/ctf-mode-workspace-guide/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/ctf-mode-workspace-guide/cover.webp https://i.ytimg.com/vi/zbNqtSw6cSw/hqdefault.jpg HackerGPT for Capture The Flag Challenges A tour of the CTF Mode workspace as HackerGPT maps CyberGym and solves the Visual Geo Stalking challenge. https://www.youtube-nocookie.com/embed/zbNqtSw6cSw 622 2026-06-17T05:07:49-07:00 https://hackergpt.org/blog/hackergpt-on-your-machine/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/hackergpt-on-your-machine/cover.webp https://hackergpt.org/blog/idor-vulnerability-example/ 2026-10-25T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/idor-vulnerability-example/cover.webp https://hackergpt.org/blog/php2shell-cve-2026-109618-109619/ 2026-10-24T23:30:00.000Z weekly 0.6 https://hackergpt.org/blog/php2shell-cve-2026-109618-109619/cover.webp https://hackergpt.org/blog/http2shell-brotli-cve-2026-111497/ 2026-10-24T23:30:00.000Z weekly 0.6 https://hackergpt.org/blog/http2shell-brotli-cve-2026-111497/cover.webp https://hackergpt.org/blog/ctf-for-beginners-web-challenges/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/ctf-for-beginners-web-challenges/cover.webp https://hackergpt.org/blog/vibe-coded-app-security-checklist/ 2026-10-06T09:00:00.000Z weekly 0.6 https://hackergpt.org/blog/vibe-coded-app-security-checklist/cover.webp https://hackergpt.org/blog/practice-hacking-legally/ 2026-11-12T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/practice-hacking-legally/cover.webp https://hackergpt.org/blog/how-to-pentest-your-own-website/ 2026-09-22T09:00:00.000Z weekly 0.6 https://hackergpt.org/blog/how-to-pentest-your-own-website/cover.webp https://hackergpt.org/blog/map-web-app-attack-surface/ 2026-10-24T23:30:00.000Z weekly 0.6 https://hackergpt.org/blog/map-web-app-attack-surface/cover.webp https://hackergpt.org/blog/hackergpt-update-stateful-ctf-engagements-concurrent-steering-and-decoupled-browsing/ 2026-10-27T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/hackergpt-update-stateful-ctf-engagements-concurrent-steering-and-decoupled-browsing/1779577261498-jyy22gwhg9.webp https://hackergpt.org/blog/hackergpt-050-advancing-applied-security-training-with-ctf-mode/ 2026-10-27T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/hackergpt-050-advancing-applied-security-training-with-ctf-mode/1773890490186-1tl5xj6txsi.webp https://hackergpt.org/blog/web-security/ 2026-10-27T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/web-security/cover.webp https://hackergpt.org/blog/intelligence-gathering/ 2026-10-24T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/intelligence-gathering/cover.webp https://hackergpt.org/blog/independence-from-openai/ 2026-10-27T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/independence-from-openai/1769563311257-lxlud2tz56p.webp https://hackergpt.org/blog/why-we-created-hackergpt/ 2026-02-04T17:29:01.455Z weekly 0.6 https://hackergpt.org/blog/why-we-created-hackergpt/1769620179064-68abr23we9.webp https://hackergpt.org/blog/securing-critical-infrastructure-the-otit-convergence-and-resilience-strategy/ 2026-02-04T17:29:05.709Z weekly 0.6 https://hackergpt.org/blog/securing-critical-infrastructure-the-otit-convergence-and-resilience-strategy/1770130225256-qumlec77t1.webp https://hackergpt.org/blog/hackergpt-crypto-analysis/ 2026-10-27T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/hackergpt-crypto-analysis/1770331606381-ok3iq3z28v.webp https://hackergpt.org/blog/bridging-the-cybersecurity-skills-gap-an-engineering-approach/ 2026-02-04T17:29:06.017Z weekly 0.6 https://hackergpt.org/blog/bridging-the-cybersecurity-skills-gap-an-engineering-approach/1770129869549-hitpyawuw1m.webp https://hackergpt.org/blog/state-sponsored-cyber-threats-building-resilience-against-the-infinite-budget/ 2026-02-04T17:29:06.891Z weekly 0.6 https://hackergpt.org/blog/state-sponsored-cyber-threats-building-resilience-against-the-infinite-budget/1770129267954-c4vep18g19e.webp https://hackergpt.org/blog/augmenting-web-reconnaissance-a-technical-deep-dive-into-hackergpt/ 2026-02-04T17:29:08.117Z weekly 0.6 https://hackergpt.org/blog/augmenting-web-reconnaissance-a-technical-deep-dive-into-hackergpt/1770187450755-28j5rbp2xkq.webp https://hackergpt.org/blog/accelerating-osint-workflows-ai-driven-intelligence-gathering-with-hackergpt/ 2026-02-04T17:29:09.499Z weekly 0.6 https://hackergpt.org/blog/accelerating-osint-workflows-ai-driven-intelligence-gathering-with-hackergpt/1770187093030-cf10dqxtf5p.webp https://hackergpt.org/blog/software-supply-chain-security-a-defense-in-depth-architecture/ 2026-10-27T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/software-supply-chain-security-a-defense-in-depth-architecture/1770127243646-9jj5zwhg7ye.webp https://hackergpt.org/blog/ai-driven-penetration-testing-the-shift-from-automation-to-agentic-workflows/ 2026-10-28T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/ai-driven-penetration-testing-the-shift-from-automation-to-agentic-workflows/cover.webp https://hackergpt.org/blog/threat-modeling-ai-agents-security-architecture-and-defense-strategies/ 2026-10-27T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/threat-modeling-ai-agents-security-architecture-and-defense-strategies/cover.webp https://hackergpt.org/blog/accelerating-reconnaissance-a-technical-guide-to-hackergpts-integrated-network-scanning/ 2026-10-24T00:00:00.000Z weekly 0.6 https://hackergpt.org/blog/accelerating-reconnaissance-a-technical-guide-to-hackergpts-integrated-network-scanning/cover.webp