Tomás Iriarte

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in networks & protocols, active directory, cryptography, forensics & dfir, recon & osint, cloud & containers.

• Web & AppSec1,880
  Evidence

  Confirmed low in the account settings endpoint

  Daily questions

  Confirmed medium in the GraphQL introspection surface

  Breaking a JWT implementation that rolled its own

  Confirmed low in the password reset flow

  A subtle race in a payment confirmation

  Cache poisoning through an unkeyed header

  Confirmed medium in the file upload handler
• Code & tooling200
  Evidence

  A subtle race in a payment confirmation

  Cache poisoning through an unkeyed header
• Networks & protocolsno proof yet
• Active Directoryno proof yet
• Cryptographyno proof yet
• Forensics & DFIRno proof yet
• Recon & OSINTno proof yet
• Cloud & containersno proof yet

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   34% of the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   30% of the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   21% of the gap
4. Connect GitHub

   Public tooling, exploits and the code you shipped.

   +160

   points
   18% of the gap
5. Clear another lab

   7 lab entries scored. 1,300 points left before the lab ceiling.

   +60

   points
   7% of the gap
6. Review another hacker's work

   Accepted peer review adds small points and proves you can judge other hackers' reasoning.

   +15

   points
   2% of the gap