Sofia Marchetti

@rasterbee · Pro Hacker · Italy

Bug bounty full time

ItalianEnglish

Annex — how this was earned

16 entries. Nothing scores without one.

3,240 total

Credentials1,400

2 entries

Reports800

4 entries

Write-ups440

3 entries

Quizzes and labs600

7 entriescapped at 600

16 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Derived from what each verified ledger entry actually covers. You have nothing in active directory, tooling & code.

Web & appsec1,060
Evidence
Confirmed low in the file upload handler
A subtle race in a payment confirmation
Cache poisoning through an unkeyed header
Chaining an IDOR into a full account takeover
Confirmed medium in the invoice export
Offensive ops350
Evidence
Daily questions
Foundations350
Evidence
Daily questions
Vuln research180
Evidence
A subtle race in a payment confirmation
Cache poisoning through an unkeyed header
Active Directoryno proof yet
Tooling & codeno proof yet

760 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

Connect Hack The Box
Rank, owns and global standing pulled from your profile.
+300
points
39% of the gap
Claim a CVE
Any published advisory with your name on the credit line.
+260
points
34% of the gap
Connect TryHackMe
Points and completed rooms.
+180
points
24% of the gap
Connect GitHub
Public tooling, exploits and the code you shipped.
+160
points
21% of the gap
Review another hacker's work
Accepted peer review adds small points and proves you can judge other hackers' reasoning.
+15
points
2% of the gap
Land another confirmed report
4 confirmed reports already. Reports have no ceiling; confirmed impact keeps moving the rank.
+360
points
47% of the gap

Not one figure above was typed in by rasterbee.

Rank requirements beyond points