Rooted
Credential not issuedProfessional required
Credential not issued

Professional profile required

This card is only issued once the hacker switches to Professional and adds a public name. Hobby profiles stay anonymous on purpose.

Annex — how this was earned

16 entries. Nothing scores without one.

3,430 total
Credentials1,450

2 entries

Reports800

4 entries

Write-ups580

3 entries

Quizzes and labs600

7 entriescapped at 600

16 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in active directory, tooling & code.

  • Web & appsec1,290
    Evidence
    Cache poisoning through an unkeyed header
    Chaining an IDOR into a full account takeover
    Confirmed medium in the OAuth callback
    Getting SSRF out of a PDF renderer
    Confirmed low in the invoice export
    Confirmed medium in the file upload handler
    Confirmed low in the tenant switcher
  • Offensive ops350
    Evidence
    Daily questions
  • Foundations350
    Evidence
    Daily questions
  • Vuln research90
    Evidence
    Cache poisoning through an unkeyed header
  • Active Directoryno proof yet
  • Tooling & codeno proof yet

The road to Exploit Hunter

570 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    53% of the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    46% of the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    32% of the gap
  4. Connect GitHub

    Public tooling, exploits and the code you shipped.

    +160
    points
    28% of the gap
  5. Review another hacker's work

    Accepted peer review adds small points and proves you can judge other hackers' reasoning.

    +15
    points
    3% of the gap
  6. Land another confirmed report

    4 confirmed reports already. Reports have no ceiling; confirmed impact keeps moving the rank.

    +360
    points
    63% of the gap

Not one figure above was typed in by hexwren.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports