Rooted
Join
Verified credential - AccessCurrent

BM::constan4

Constan Millán Hernández

@constan4 · Junior Hacker · Spain

Cybersecurity Specialist | Pentesting & Ethical Hacking | Ex-Dev (DAM) & Systems (SMR)

SpanishEnglish
ACCESS1RANK
RANK
1 · Junior Hacker
Verified points
197
Public tooling
4 ★
Issued
2026-08-22
Valid until
2027-08-26
Standing
73 of 134
Demonstrated knowledge

Skills

Every channel comes from unique Daily answers. Difficulty and sustained evidence move the signal; repeats never do.

15unique answers
Strongest signal · Forensics & DFIR · 41/100 · Operational
WEB

Web & AppSec

33/100
Developing100% accuracy2/2 correctMedium clearednew signal

7 signal points to Operational · early signal

NETWORK

Networks & protocols

36/100
Developing100% accuracy2/2 correctMedium clearednew signal

4 signal points to Operational · early signal

AD

Active Directory

38/100
Developing100% accuracy2/2 correctHard clearednew signal

2 signal points to Operational · early signal

CRYPTO

Cryptography

40/100
Operational100% accuracy3/3 correctMedium clearedsteady

22 signal points to Strong · early signal

FORENSICS

Forensics & DFIR

41/100
Operational100% accuracy2/2 correctHard clearednew signal

21 signal points to Strong · early signal

RECON

Recon & OSINT

31/100
Developing100% accuracy1/1 correctHard clearednew signal

9 signal points to Operational · early signal

CLOUD

Cloud & containers

40/100
Operational100% accuracy3/3 correctMedium clearedsteady

22 signal points to Strong · early signal

Annex — how this was earned

16 entries. Nothing scores without one.

197 total
Credentials80

1 entry

Quizzes and labs117

15 entries

16 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Where your proof lands

Derived from what each verified ledger entry actually covers.

  • Code & tooling80
    Evidence
    Constan4
  • Forensics & DFIR23
    Evidence
    Una alerta referencia C:\ProgramData\updater.exe, pero el archivo ya no está cuando llegan
  • Active Directory19
    Evidence
    Una usuaria abre el share de sueldos sin escribir otra contraseña. En la captura, el domin
    BloodHound muestra que Helpdesk-L1 tiene GenericAll sobre Server Admins, aunque el equipo
  • Networks & protocols16
    Evidence
    Un servicio administrativo interno usa TLS, pero el certificado vale para old-admin.corp m
    Un host de prueba comprometido en la VLAN de usuarios puede abrir conexiones TCP salientes
  • Cryptography16
    Evidence
    Después de una filtración, doscientos usuarios con la clave `summer2026` tienen el mismo h
    Una API valida HMACs de webhooks con un loop que retorna al primer byte diferente. ¿Cuál
    Una imagen cifrada todavía deja ver bloques visuales repetidos. ¿Qué modo AES es famoso po
  • Cloud & containers16
    Evidence
    Una imagen de contenedor contiene una clave cloud en una capa ENV. ¿Por qué es inseguro?
    Un contenedor controlado por un tenant corre privileged, monta /var/run/docker.sock y ve e
    Una service account de Kubernetes comprometida intenta listar todos los secretos del clust
  • Recon & OSINT15
    Evidence
    Un staging en scope devuelve 200 para /.git/HEAD y expone refs, aunque el listado de direc
  • Web & AppSec12
    Evidence
    Un endpoint de vista previa PDF acepta una URL. Al enviar http://169.254.169.254/latest/me
    Una función de imagen-desde-URL puede pedir http://127.0.0.1/admin desde el servidor. ¿Qué

The road to Operator

103 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    closes the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    closes the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    closes the gap
  4. Clear another lab

    15 lab entries scored. 1,883 points left before the lab ceiling.

    +60
    points
    58% of the gap
  5. Publish a write-up

    Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

    +180
    points
    closes the gap
  6. Submit a vulnerability report

    A confirmed low, medium, high or critical report is the cleanest path up the ladder.

    +160
    points
    closes the gap

Not one figure above was typed in by constan4.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports