credencial reservada

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in networks & protocols, active directory, cryptography, forensics & dfir, recon & osint, cloud & containers.

• Web & AppSec4,860
  Evidence

  Daily questions

  Cache poisoning through an unkeyed header

  Second-order SQL injection in a reporting job

  Confirmed medium in the tenant switcher

  Confirmed medium in the file upload handler

  Confirmed low in the password reset flow

  Chaining an IDOR into a full account takeover

  Confirmed high in the password reset flow

  Confirmed low in the webhook receiver

  Confirmed low in the GraphQL introspection surface

  Confirmed high in the file upload handler

  Confirmed high in the OAuth callback

  Confirmed medium in the webhook receiver

  Confirmed medium in the account settings endpoint
• Code & tooling280
  Evidence

  Cache poisoning through an unkeyed header

  Second-order SQL injection in a reporting job
• Networks & protocolsno proof yet
• Active Directoryno proof yet
• Cryptographyno proof yet
• Forensics & DFIRno proof yet
• Recon & OSINTno proof yet
• Cloud & containersno proof yet

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   21% of the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   18% of the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   12% of the gap
4. Connect GitHub

   Public tooling, exploits and the code you shipped.

   +160

   points
   11% of the gap
5. Clear another lab

   9 lab entries scored. 1,200 points left before the lab ceiling.

   +60

   points
   4% of the gap
6. Review another hacker's work

   Accepted peer review adds small points and proves you can judge other hackers' reasoning.

   +15

   points
   1% of the gap