Rooted
Join
Verified credential - AccessCurrent

BM::tbug

Mario Lorenzo

@tbug · Junior Hacker · Spain

SOC specialist

SpanishEnglishJapanese
ACCESS1RANK
RANK
1 · Junior Hacker
Verified points
155
Issued
2026-08-23
Valid until
2027-08-24
Standing
77 of 134
Demonstrated knowledge

Skills

Every channel comes from unique Daily answers. Difficulty and sustained evidence move the signal; repeats never do.

24unique answers
Strongest signal · Web & AppSec · 66/100 · Strong
WEB

Web & AppSec

66/100
Strong89% accuracy8/9 correctHard cleared↑ improving

16 signal points to Advanced · growing evidence

NETWORK

Networks & protocols

53/100
Operational63% accuracy5/8 correctHard cleared↑ improving

9 signal points to Strong · growing evidence

AD

Active Directory

53/100
Operational71% accuracy5/7 correctHard clearedsteady

9 signal points to Strong · growing evidence

Annex — how this was earned

18 entries. Nothing scores without one.

155 total
Quizzes and labs155

18 entries

18 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in cryptography, forensics & dfir, recon & osint, code & tooling, cloud & containers.

  • Networks & protocols57
    Evidence
    Un servicio administrativo interno usa TLS, pero el certificado vale para old-admin.corp m
    Dos hosts informan de golpe que la IP del gateway tiene otra MAC; la captura muestra respu
    La oficina llega a direcciones IP pero fallan todos los hostnames. La captura muestra tráf
    Una estación envía cientos de consultas TXT largas y únicas bajo un dominio cada 30 segund
  • Web & AppSec55
    Evidence
    Un endpoint de vista previa PDF acepta una URL. Al enviar http://169.254.169.254/latest/me
    Agregar una comilla al ID de producto cambia la respuesta por un error de sintaxis SQL. ¿Q
    Cambiás /users/41 por /users/42 y ves el perfil de otra persona. ¿Qué es?
    Un comentario con `<script>alert(1)</script>` se ejecuta para cada visitante. ¿Cuál es el
    POST /account/email cambia el email del usuario autenticado usando sólo una cookie de sesi
    Una función de imagen-desde-URL puede pedir http://127.0.0.1/admin desde el servidor. ¿Qué
    Una API acepta un JWT cuyo header se cambió de RS256 a HS256 y se firmó usando la clave pú
  • Active Directory43
    Evidence
    Un servidor legacy está marcado TRUSTED_FOR_DELEGATION y administradores de dominio entran
    Una cuenta de dominio sin privilegios pide un ticket para svc_sql; la cuenta con SPN usa u
    La firma SMB es opcional en varios servidores y los controladores no exigen firma LDAP ni
    BloodHound muestra que Helpdesk-L1 tiene GenericAll sobre Server Admins, aunque el equipo
    A las 08:55 todos los empleados de una sucursal pierden el login de dominio. Un servidor W
  • Cryptographyno proof yet
  • Forensics & DFIRno proof yet
  • Recon & OSINTno proof yet
  • Code & toolingno proof yet
  • Cloud & containersno proof yet

The road to Operator

145 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    closes the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    closes the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    closes the gap
  4. Connect GitHub

    Public tooling, exploits and the code you shipped.

    +160
    points
    closes the gap
  5. Clear another lab

    18 lab entries scored. 1,845 points left before the lab ceiling.

    +60
    points
    41% of the gap
  6. Publish a write-up

    Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

    +180
    points
    closes the gap

Not one figure above was typed in by tbug.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports