Rooted
Join
Verified credential - AccessCurrent

BM::ajl1

Faridh Wajli

@ajl1 · Junior Hacker · Indonesia

Security Research

Indonesian
ACCESS1RANK
RANK
1 · Junior Hacker
Verified points
138
Public tooling
11 ★
Issued
2026-08-23
Valid until
2027-08-23
Standing
64 of 109

Statement

Cybersecurity Analyst & Security Researcher | Apple Security Hall of Fame (2026) | Specialized in Web Application Penetration Testing, Bug Bounty (Google, Bugcrowd, HackerOne), & Custom Security Tooling.

Demonstrated knowledge

Skills

Every channel comes from unique Daily answers. Difficulty and sustained evidence move the signal; repeats never do.

5unique answers
Strongest signal · Web & AppSec · 53/100 · Operational
WEB

Web & AppSec

53/100
Operational80% accuracy4/5 correctHard clearedsteady

9 signal points to Strong · growing evidence

Annex — how this was earned

5 entries. Nothing scores without one.

138 total
Credentials103

1 entry

Quizzes and labs35

4 entries

5 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in networks & protocols, active directory, cryptography, forensics & dfir, recon & osint, cloud & containers.

  • Code & tooling103
    Evidence
    Mr-C0k1
  • Web & AppSec35
    Evidence
    POST /account/email changes the logged-in user's email using only a session cookie; a cros
    A PDF preview endpoint accepts a URL. Supplying http://169.254.169.254/latest/meta-data/ c
    The search route parameterises q but concatenates sort directly into `ORDER BY ${sort}`. A
    Adding a single quote to a product ID changes the response to a SQL syntax error. What sho
  • Networks & protocolsno proof yet
  • Active Directoryno proof yet
  • Cryptographyno proof yet
  • Forensics & DFIRno proof yet
  • Recon & OSINTno proof yet
  • Cloud & containersno proof yet

The road to Operator

162 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    closes the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    closes the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    closes the gap
  4. Clear another lab

    4 lab entries scored. 1,965 points left before the lab ceiling.

    +60
    points
    37% of the gap
  5. Publish a write-up

    Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

    +180
    points
    closes the gap
  6. Submit a vulnerability report

    A confirmed low, medium, high or critical report is the cleanest path up the ladder.

    +160
    points
    99% of the gap

Not one figure above was typed in by ajl1.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports