Rooted
Unirme
Credencial no emitidaRequiere perfil Profesional
Credencial no emitida

Hace falta un perfil Profesional

Esta credencial se emite recién cuando el hacker pasa a Profesional y agrega un nombre público. Los perfiles hobby siguen siendo anónimos a propósito.

Annex — how this was earned

44 entries. Nothing scores without one.

17,530 total
Credentials3,000

4 entriescapped at 3,000

Reports12,400

20 entries

Write-ups1,380

8 entries

Quizzes and labs800

12 entries

Estos totales se apoyan en 44 entradas del registro. El detalle completo lo ven el titular y la revisión de Rooted.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in networks & protocols, active directory, cryptography, forensics & dfir, recon & osint, cloud & containers.

  • Web & AppSec14,470
    Evidence
    Daily questions
    Confirmed critical in the tenant switcher
    Confirmed high in the OAuth callback
    Second-order SQL injection in a reporting job
    Confirmed low in the OAuth callback
    Confirmed critical in the GraphQL introspection surface
    Confirmed medium in the GraphQL introspection surface
    Confirmed critical in the password reset flow
    Confirmed medium in the tenant switcher
    Confirmed high in the GraphQL introspection surface
    Getting SSRF out of a PDF renderer
    Confirmed high in the file upload handler
    Chaining an IDOR into a full account takeover
    Confirmed medium in the file upload handler
    Confirmed high in the invoice export
    Confirmed low in the invoice export
    Confirmed critical in the invoice export
    Confirmed high in the password reset flow
    Confirmed low in the file upload handler
    Confirmed medium in the invoice export
    Confirmed medium in the OAuth callback
  • Code & tooling510
    Evidence
    Second-order SQL injection in a reporting job
  • Networks & protocolsno proof yet
  • Active Directoryno proof yet
  • Cryptographyno proof yet
  • Forensics & DFIRno proof yet
  • Recon & OSINTno proof yet
  • Cloud & containersno proof yet

The road to Ghost

4,470 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    7% of the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    6% of the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    4% of the gap
  4. Connect GitHub

    Public tooling, exploits and the code you shipped.

    +160
    points
    4% of the gap
  5. Clear another lab

    12 lab entries scored. 1,200 points left before the lab ceiling.

    +60
    points
    1% of the gap
  6. Review another hacker's work

    Accepted peer review adds small points and proves you can judge other hackers' reasoning.

    +15
    points
    0% of the gap

Not one figure above was typed in by 0xkoi.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports