Priya Nandakumar

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in networks & protocols, active directory, cryptography, forensics & dfir, recon & osint, cloud & containers.

• Web & AppSec5,030
  Evidence

  Daily questions

  Chaining an IDOR into a full account takeover

  Cache poisoning through an unkeyed header

  Getting SSRF out of a PDF renderer

  Confirmed low in the password reset flow

  Confirmed medium in the tenant switcher

  Confirmed medium in the OAuth callback

  Confirmed medium in the GraphQL introspection surface

  Confirmed low in the invoice export

  Confirmed high in the account settings endpoint

  A subtle race in a payment confirmation

  Confirmed low in the GraphQL introspection surface

  Confirmed high in the tenant switcher

  Confirmed high in the OAuth callback

  Confirmed medium in the account settings endpoint
• Code & tooling170
  Evidence

  Cache poisoning through an unkeyed header

  A subtle race in a payment confirmation
• Networks & protocolsno proof yet
• Active Directoryno proof yet
• Cryptographyno proof yet
• Forensics & DFIRno proof yet
• Recon & OSINTno proof yet
• Cloud & containersno proof yet

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   closes the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   87% of the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   60% of the gap
4. Connect GitHub

   Public tooling, exploits and the code you shipped.

   +160

   points
   53% of the gap
5. Clear another lab

   9 lab entries scored. 1,200 points left before the lab ceiling.

   +60

   points
   20% of the gap
6. Review another hacker's work

   Accepted peer review adds small points and proves you can judge other hackers' reasoning.

   +15

   points
   5% of the gap