Rooted
Verified credential - AccessCurrent

BM::constan4

Constan Millán Hernández

@constan4 · Junior Hacker · Spain

Cybersecurity Specialist | Pentesting & Ethical Hacking | Ex-Dev (DAM) & Systems (SMR)

SpanishEnglish
ACCESS1RANK
RANK
1 · Junior Hacker
Verified points
119
Public tooling
4 ★
Issued
2026-08-22
Valid until
2027-08-22
Standing
69 of 109
Demonstrated knowledge

Skills

Every channel comes from unique Daily answers. Difficulty and sustained evidence move the signal; repeats never do.

5unique answers
Strongest signal · Cloud & containers · 33/100 · Developing
WEB

Web & AppSec

19/100
Exploring100% accuracy1/1 correctEasy clearednew signal

1 signal points to Developing · early signal

NETWORK

Networks & protocols

24/100
Developing100% accuracy1/1 correctMedium clearednew signal

16 signal points to Operational · early signal

AD

Active Directory

31/100
Developing100% accuracy1/1 correctHard clearednew signal

9 signal points to Operational · early signal

CLOUD

Cloud & containers

33/100
Developing100% accuracy2/2 correctMedium clearednew signal

7 signal points to Operational · early signal

Annex — how this was earned

6 entries. Nothing scores without one.

119 total
Credentials80

1 entry

Quizzes and labs39

5 entries

6 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in cryptography, forensics & dfir, recon & osint.

  • Code & tooling80
    Evidence
    Constan4
  • Active Directory15
    Evidence
    BloodHound muestra que Helpdesk-L1 tiene GenericAll sobre Server Admins, aunque el equipo
  • Cloud & containers12
    Evidence
    Un contenedor controlado por un tenant corre privileged, monta /var/run/docker.sock y ve e
    Una service account de Kubernetes comprometida intenta listar todos los secretos del clust
  • Networks & protocols8
    Evidence
    Un host de prueba comprometido en la VLAN de usuarios puede abrir conexiones TCP salientes
  • Web & AppSec4
    Evidence
    Una función de imagen-desde-URL puede pedir http://127.0.0.1/admin desde el servidor. ¿Qué
  • Cryptographyno proof yet
  • Forensics & DFIRno proof yet
  • Recon & OSINTno proof yet

The road to Operator

181 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    closes the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    closes the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    99% of the gap
  4. Clear another lab

    5 lab entries scored. 1,961 points left before the lab ceiling.

    +60
    points
    33% of the gap
  5. Publish a write-up

    Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

    +180
    points
    99% of the gap
  6. Submit a vulnerability report

    A confirmed low, medium, high or critical report is the cleanest path up the ladder.

    +160
    points
    88% of the gap

Not one figure above was typed in by constan4.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports