credencial reservada

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in active directory, cryptography, forensics & dfir, cloud & containers.

• Code & tooling159
  Evidence

  flinch-1
• Networks & protocols31
  Evidence

  First night on a hospital SOC: a scan shows TCP 443 open on the patient portal. Which serv

  A perimeter scan finds TCP 445 reachable from the internet on a file server that also acce

  A compromised test host in the user VLAN can open outbound TCP connections to arbitrary in

  A host can ping a server but cannot connect to its TCP 8080 service. What should you check
• Web & AppSec28
  Evidence

  During an authorised pentest, GET /api/invoices/184 returns your invoice. Changing 184 to

  The search route parameterises q but concatenates sort directly into `ORDER BY ${sort}`. A

  A comment containing `<script>alert(1)</script>` runs for every visitor. What is the bug?

  You change /users/41 to /users/42 and see another user's profile. What is this?

  Adding a single quote to a product ID changes the response to a SQL syntax error. What sho
• Recon & OSINT27
  Evidence

  You want subdomains without sending traffic to the target. Which approach fits?

  A mobile app references assets-prod-company.s3.amazonaws.com; anonymous listing is denied
• Active Directoryno proof yet
• Cryptographyno proof yet
• Forensics & DFIRno proof yet
• Cloud & containersno proof yet

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   closes the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   closes the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   closes the gap
4. Clear another lab

   12 lab entries scored. 1,914 points left before the lab ceiling.

   +60

   points
   closes the gap
5. Publish a write-up

   Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

   +180

   points
   closes the gap
6. Submit a vulnerability report

   A confirmed low, medium, high or critical report is the cleanest path up the ladder.

   +160

   points
   closes the gap