Rooted
Credential not issuedProfessional required
Credential not issued

Professional profile required

This card is only issued once the hacker switches to Professional and adds a public name. Hobby profiles stay anonymous on purpose.

Demonstrated knowledge

Skills

Every channel comes from unique Daily answers. Difficulty and sustained evidence move the signal; repeats never do.

23unique answers
Strongest signal · Networks & protocols · 45/100 · Operational
WEB

Web & AppSec

36/100
Developing45% accuracy5/11 correctMedium clearedsteady

4 signal points to Operational · growing evidence

NETWORK

Networks & protocols

45/100
Operational67% accuracy4/6 correctHard clearedsteady

17 signal points to Strong · growing evidence

AD

Active Directory

14/100
Exploring0% accuracy0/1 correctNo difficulty clearednew signal

6 signal points to Developing · early signal

RECON

Recon & OSINT

43/100
Operational60% accuracy3/5 correctHard clearedsteady

19 signal points to Strong · growing evidence

Annex — how this was earned

13 entries. Nothing scores without one.

245 total
Credentials159

1 entry

Quizzes and labs86

12 entries

13 ledger entries back these totals. The full derivation is visible to the holder and to Rooted review.

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in active directory, cryptography, forensics & dfir, cloud & containers.

  • Code & tooling159
    Evidence
    flinch-1
  • Networks & protocols31
    Evidence
    First night on a hospital SOC: a scan shows TCP 443 open on the patient portal. Which serv
    A perimeter scan finds TCP 445 reachable from the internet on a file server that also acce
    A compromised test host in the user VLAN can open outbound TCP connections to arbitrary in
    A host can ping a server but cannot connect to its TCP 8080 service. What should you check
  • Web & AppSec28
    Evidence
    During an authorised pentest, GET /api/invoices/184 returns your invoice. Changing 184 to
    The search route parameterises q but concatenates sort directly into `ORDER BY ${sort}`. A
    A comment containing `<script>alert(1)</script>` runs for every visitor. What is the bug?
    You change /users/41 to /users/42 and see another user's profile. What is this?
    Adding a single quote to a product ID changes the response to a SQL syntax error. What sho
  • Recon & OSINT27
    Evidence
    You want subdomains without sending traffic to the target. Which approach fits?
    A mobile app references assets-prod-company.s3.amazonaws.com; anonymous listing is denied
  • Active Directoryno proof yet
  • Cryptographyno proof yet
  • Forensics & DFIRno proof yet
  • Cloud & containersno proof yet

The road to Operator

55 pts short

Everything below is priced. Pick the cheapest one and the gap closes.

  1. Connect Hack The Box

    Rank, owns and global standing pulled from your profile.

    +300
    points
    closes the gap
  2. Claim a CVE

    Any published advisory with your name on the credit line.

    +260
    points
    closes the gap
  3. Connect TryHackMe

    Points and completed rooms.

    +180
    points
    closes the gap
  4. Clear another lab

    12 lab entries scored. 1,914 points left before the lab ceiling.

    +60
    points
    closes the gap
  5. Publish a write-up

    Explain the bug, impact and fix. Peer-reviewed write-ups score after approval.

    +180
    points
    closes the gap
  6. Submit a vulnerability report

    A confirmed low, medium, high or critical report is the cleanest path up the ladder.

    +160
    points
    closes the gap

Not one figure above was typed in by hiim.

Read how points are earned
Get your credential
Rank requirements beyond points
  • Rank 4+ - One verified credential or one confirmed report
  • Rank 7+ - One confirmed report or one credited CVE
  • Rank 9+ - A credited CVE at CVSS 9.0+, or three critical confirmed reports