redacted credential

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in active directory, tooling & code.

• Web & appsec3,960
  Evidence

  Cache poisoning through an unkeyed header

  Second-order SQL injection in a reporting job

  Confirmed medium in the tenant switcher

  Confirmed medium in the file upload handler

  Confirmed low in the password reset flow

  Chaining an IDOR into a full account takeover

  Confirmed high in the password reset flow

  Confirmed low in the webhook receiver

  Confirmed low in the GraphQL introspection surface

  Confirmed high in the file upload handler

  Confirmed high in the OAuth callback

  Confirmed medium in the webhook receiver

  Confirmed medium in the account settings endpoint
• Offensive ops450
  Evidence

  Daily questions
• Foundations450
  Evidence

  Daily questions
• Vuln research280
  Evidence

  Cache poisoning through an unkeyed header

  Second-order SQL injection in a reporting job
• Active Directoryno proof yet
• Tooling & codeno proof yet

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   21% of the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   18% of the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   12% of the gap
4. Connect GitHub

   Public tooling, exploits and the code you shipped.

   +160

   points
   11% of the gap
5. Review another hacker's work

   Accepted peer review adds small points and proves you can judge other hackers' reasoning.

   +15

   points
   1% of the gap
6. Land another confirmed report

   10 confirmed reports already. Reports have no ceiling; confirmed impact keeps moving the rank.

   +360

   points
   25% of the gap