Rooted
Unirme
Credencial verificada - AccesoVigente

BM::bonginc

Bonginc

@bonginc · Operator · United States

Pentester

English
ACCESO2RANGO
RANGO
2 · Operator
Puntos verificados
579
Hack The Box
Script Kiddie
TryHackMe
— · 33 rooms
Herramientas públicas
5 ★
Emitida
2026-08-16
Vence
2027-08-29
Posición
32 de 134
Certificaciones
CAPT
Conocimiento demostrado

Habilidades

Cada señal nace de respuestas únicas del Daily. La dificultad y la evidencia sostenida la hacen crecer; las repeticiones nunca.

17respuestas únicas
Señal más fuerte · Web y AppSec · 52/100 · Operativo
WEB

Web y AppSec

52/100
Operativo57% de precisión8/14 correctasDifícil superada↓ bajando

10 puntos de señal para Sólido · evidencia confiable

NETWORK

Redes y protocolos

14/100
Explorando0% de precisión0/1 correctasSin dificultad superadaseñal nueva

6 puntos de señal para En desarrollo · señal inicial

CRYPTO

Criptografía

19/100
Explorando100% de precisión1/1 correctasFácil superadaseñal nueva

1 puntos de señal para En desarrollo · señal inicial

FORENSICS

Forense y DFIR

14/100
Explorando0% de precisión0/1 correctasSin dificultad superadaseñal nueva

6 puntos de señal para En desarrollo · señal inicial

Annex — how this was earned

13 entries. Nothing scores without one.

579 total
Credentials509

4 entries

Quizzes and labs70

9 entries

Estos totales se apoyan en 13 entradas del registro. El detalle completo lo ven el titular y la revisión de Rooted.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in forensics & dfir, recon & osint, cloud & containers.

  • Networks & protocols258
    Evidence
    CAPT
    70256
    bonginc
  • Code & tooling133
    Evidence
    bonginc
  • Web & AppSec124
    Evidence
    A PDF preview endpoint accepts a URL. Supplying http://169.254.169.254/latest/meta-data/ c
    POST /account/email changes the logged-in user's email using only a session cookie; a cros
    A page on another site can submit a form that changes your email while you are logged in.
    bonginc
    The search route parameterises q but concatenates sort directly into `ORDER BY ${sort}`. A
    During an authorised pentest, GET /api/invoices/184 returns your invoice. Changing 184 to
    Adding a single quote to a product ID changes the response to a SQL syntax error. What sho
    You change /users/41 to /users/42 and see another user's profile. What is this?
  • Active Directory60
    Evidence
    70256
  • Cryptography4
    Evidence
    After a breach, two hundred users with the password `summer2026` have the same stored hash
  • Forensics & DFIRno proof yet
  • Recon & OSINTno proof yet
  • Cloud & containersno proof yet

The road to Hacker

321 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    81% of the gap
  2. Clear another lab

    9 lab entries scored. 1,930 points left before the lab ceiling.

    +60
    points
    19% of the gap
  3. Publish a write-up

    Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

    +180
    points
    56% of the gap
  4. Submit a vulnerability report

    A confirmed low, medium, high or critical report is the cleanest path up the ladder.

    +160
    points
    50% of the gap
  5. Own 10 more machines

    Each user or system own is worth 4 points, and rank bonuses compound.

    +40
    points
    12% of the gap
  6. Earn Security+

    Verified against your credential URL.

    +80
    points
    25% of the gap

Not one figure above was typed in by bonginc.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports