Sofia Marchetti

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in networks & protocols, active directory, cryptography, forensics & dfir, recon & osint, cloud & containers.

• Web & AppSec1,760
  Evidence

  Daily questions

  Confirmed low in the file upload handler

  A subtle race in a payment confirmation

  Cache poisoning through an unkeyed header

  Chaining an IDOR into a full account takeover

  Confirmed medium in the invoice export
• Code & tooling180
  Evidence

  A subtle race in a payment confirmation

  Cache poisoning through an unkeyed header
• Networks & protocolsno proof yet
• Active Directoryno proof yet
• Cryptographyno proof yet
• Forensics & DFIRno proof yet
• Recon & OSINTno proof yet
• Cloud & containersno proof yet

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   39% of the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   34% of the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   24% of the gap
4. Connect GitHub

   Public tooling, exploits and the code you shipped.

   +160

   points
   21% of the gap
5. Clear another lab

   7 lab entries scored. 1,300 points left before the lab ceiling.

   +60

   points
   8% of the gap
6. Review another hacker's work

   Accepted peer review adds small points and proves you can judge other hackers' reasoning.

   +15

   points
   2% of the gap