Tomás Iriarte

@brownout · Pro Hacker · Argentina

Pentester · web and API

SpanishEnglish

Annex — how this was earned

16 entries. Nothing scores without one.

3,130 total

Credentials1,150

2 entries

Reports800

4 entries

Write-ups580

3 entries

Quizzes and labs600

7 entriescapped at 600

16 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Derived from what each verified ledger entry actually covers. You have nothing in active directory, tooling & code.

Web & appsec1,180
Evidence
Confirmed low in the account settings endpoint
Confirmed medium in the GraphQL introspection surface
Breaking a JWT implementation that rolled its own
Confirmed low in the password reset flow
A subtle race in a payment confirmation
Cache poisoning through an unkeyed header
Confirmed medium in the file upload handler
Offensive ops350
Evidence
Daily questions
Foundations350
Evidence
Daily questions
Vuln research200
Evidence
A subtle race in a payment confirmation
Cache poisoning through an unkeyed header
Active Directoryno proof yet
Tooling & codeno proof yet

870 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

Connect Hack The Box
Rank, owns and global standing pulled from your profile.
+300
points
34% of the gap
Claim a CVE
Any published advisory with your name on the credit line.
+260
points
30% of the gap
Connect TryHackMe
Points and completed rooms.
+180
points
21% of the gap
Connect GitHub
Public tooling, exploits and the code you shipped.
+160
points
18% of the gap
Review another hacker's work
Accepted peer review adds small points and proves you can judge other hackers' reasoning.
+15
points
2% of the gap
Land another confirmed report
4 confirmed reports already. Reports have no ceiling; confirmed impact keeps moving the rank.
+360
points
41% of the gap

Not one figure above was typed in by brownout.

Rank requirements beyond points