Professional profile required
This card is only issued once the hacker switches to Professional and adds a public name. Hobby profiles stay anonymous on purpose.
Annex — how this was earned
16 entries. Nothing scores without one.
2 entries
4 entries
3 entries
7 entries
16 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.
Where your proof lands
Derived from what each verified ledger entry actually covers. You have nothing in networks & protocols, active directory, cryptography, forensics & dfir, recon & osint, cloud & containers.
- Web & AppSec1,810EvidenceCache poisoning through an unkeyed headerConfirmed medium in the GraphQL introspection surfaceDaily questionsA subtle race in a payment confirmationConfirmed medium in the account settings endpointChaining an IDOR into a full account takeoverConfirmed low in the password reset flowConfirmed low in the GraphQL introspection surface
- Code & tooling130EvidenceCache poisoning through an unkeyed headerA subtle race in a payment confirmation
- Networks & protocolsno proof yet
- Active Directoryno proof yet
- Cryptographyno proof yet
- Forensics & DFIRno proof yet
- Recon & OSINTno proof yet
- Cloud & containersno proof yet
The road to Exploit Hunter
1,210 pts shortEverything below is priced. Pick the cheapest one and the gap closes.
- Connect Hack The Box
Rank, owns and global standing pulled from your profile.
+300points25% of the gap - Claim a CVE
Any published advisory with your name on the credit line.
+260points21% of the gap - Connect TryHackMe
Points and completed rooms.
+180points15% of the gap - Connect GitHub
Public tooling, exploits and the code you shipped.
+160points13% of the gap - Clear another lab
7 lab entries scored. 1,300 points left before the lab ceiling.
+60points5% of the gap - Review another hacker's work
Accepted peer review adds small points and proves you can judge other hackers' reasoning.
+15points1% of the gap
Not one figure above was typed in by grimoire.
Read how points are earnedRank requirements beyond points
- Rank 4+ - One verified credential or one confirmed report
- Rank 7+ - One confirmed report or one credited CVE
- Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports