Rooted
Credential not issuedProfessional required
Credential not issued

Professional profile required

This card is only issued once the hacker switches to Professional and adds a public name. Hobby profiles stay anonymous on purpose.

Annex — how this was earned

16 entries. Nothing scores without one.

2,790 total
Credentials950

2 entries

Reports800

4 entries

Write-ups440

3 entries

Quizzes and labs600

7 entriescapped at 600

16 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in active directory, tooling & code.

  • Web & appsec1,110
    Evidence
    Cache poisoning through an unkeyed header
    Confirmed medium in the GraphQL introspection surface
    A subtle race in a payment confirmation
    Confirmed medium in the account settings endpoint
    Chaining an IDOR into a full account takeover
    Confirmed low in the password reset flow
    Confirmed low in the GraphQL introspection surface
  • Offensive ops350
    Evidence
    Daily questions
  • Foundations350
    Evidence
    Daily questions
  • Vuln research130
    Evidence
    Cache poisoning through an unkeyed header
    A subtle race in a payment confirmation
  • Active Directoryno proof yet
  • Tooling & codeno proof yet

The road to Exploit Hunter

1,210 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    25% of the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    21% of the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    15% of the gap
  4. Connect GitHub

    Public tooling, exploits and the code you shipped.

    +160
    points
    13% of the gap
  5. Review another hacker's work

    Accepted peer review adds small points and proves you can judge other hackers' reasoning.

    +15
    points
    1% of the gap
  6. Land another confirmed report

    4 confirmed reports already. Reports have no ceiling; confirmed impact keeps moving the rank.

    +360
    points
    30% of the gap

Not one figure above was typed in by grimoire.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports