Malvin Ken Sudirgo

Where your proof lands

Derived from what each verified ledger entry actually covers.

• Code & tooling187
  Evidence

  A Node route executes `exec('ping -c 1 ' + req.body.host)` after checking only that host i

  A CI log reveals a production API key copied from `config.ts`. The team asks where that ke

  A Python worker loads a base64 job field with pickle.loads; jobs can be submitted by ordin

  On authentication failure, middleware logs the complete request headers, including Authori

  The build requests `company-auth` without a registry scope; the name is absent publicly an

  A download handler joins `/srv/reports` with a user filename after replacing the first `..

  During a fintech code review, you spot a search box concatenated directly into SQL. Which

  A server runs `eval()` on a value from the request body. What is the danger?

  Vin11704

  Code builds `ping ` + userInput and passes it to a shell. What is the main risk?
• Cloud & containers66
  Evidence

  A URL previewer inside a cloud VM is being abused to hunt for temporary credentials. Which

  A CI role used to deploy one Lambda has `iam:PassRole` on `*` and permission to update arb

  A storage bucket lets anonymous visitors download private backups. What is wrong?

  A storage bucket denies listing but permits anonymous PutObject to the prefix used by the

  A tenant-controlled container runs privileged, mounts /var/run/docker.sock and can see the

  An app only reads one bucket but its IAM policy allows `s3:*` on `*`. Which principle is b

  A compromised Kubernetes service account tries to list every secret in the cluster. Which

  A container image contains a cloud key in an ENV layer. Why is that unsafe?
• Web & AppSec62
  Evidence

  During an authorised pentest, GET /api/invoices/184 returns your invoice. Changing 184 to

  A page on another site can submit a form that changes your email while you are logged in.

  An image-from-URL feature can fetch http://127.0.0.1/admin from the server. What is this?

  The search route parameterises q but concatenates sort directly into `ORDER BY ${sort}`. A

  POST /account/email changes the logged-in user's email using only a session cookie; a cros

  Adding a single quote to a product ID changes the response to a SQL syntax error. What sho

  You change /users/41 to /users/42 and see another user's profile. What is this?
• Recon & OSINT19
  Evidence

  Public tender PDFs list internal usernames, software versions and an author naming convent

  A web root exposes /.git/. What could an attacker recover?
• Networks & protocols16
  Evidence

  First night on a hospital SOC: a scan shows TCP 443 open on the patient portal. Which serv

  The office can reach IP addresses but every hostname fails. Your packet capture shows unan

  A host can ping a server but cannot connect to its TCP 8080 service. What should you check

  A Windows file share is reachable on TCP 445. Which protocol are you looking at?
• Active Directory12
  Evidence

  At 08:55 every employee in a branch loses domain login. One Windows server holds the direc

  A backup operators group unexpectedly holds Replicating Directory Changes and Replicating
• Forensics & DFIR12
  Evidence

  EDR records powershell.exe -NoP -W Hidden -EncodedCommand followed by a connection to a ne

  Logs come from systems in different time zones. What is the safest timeline baseline?
• Cryptography8
  Evidence

  A user export stores passwords as unsalted SHA-256; two employees with the same password h

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   58% of the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   50% of the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   35% of the gap
4. Clear another lab

   40 lab entries scored. 1,697 points left before the lab ceiling.

   +60

   points
   12% of the gap
5. Publish a write-up

   Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

   +180

   points
   35% of the gap
6. Submit a vulnerability report

   A confirmed low, medium, high or critical report is the cleanest path up the ladder.

   +160

   points
   31% of the gap