Priya Nandakumar

Where your proof lands

Derived from what each verified ledger entry actually covers. You have nothing in active directory, tooling & code.

• Web & appsec4,130
  Evidence

  Chaining an IDOR into a full account takeover

  Cache poisoning through an unkeyed header

  Getting SSRF out of a PDF renderer

  Confirmed low in the password reset flow

  Confirmed medium in the tenant switcher

  Confirmed medium in the OAuth callback

  Confirmed medium in the GraphQL introspection surface

  Confirmed low in the invoice export

  Confirmed high in the account settings endpoint

  A subtle race in a payment confirmation

  Confirmed low in the GraphQL introspection surface

  Confirmed high in the tenant switcher

  Confirmed high in the OAuth callback

  Confirmed medium in the account settings endpoint
• Offensive ops450
  Evidence

  Daily questions
• Foundations450
  Evidence

  Daily questions
• Vuln research170
  Evidence

  Cache poisoning through an unkeyed header

  A subtle race in a payment confirmation
• Active Directoryno proof yet
• Tooling & codeno proof yet

Everything below is priced. Pick the cheapest one and the gap closes.

1. Connect Hack The Box

   Rank, owns and global standing pulled from your profile.

   +300

   points
   closes the gap
2. Claim a CVE

   Any published advisory with your name on the credit line.

   +260

   points
   87% of the gap
3. Connect TryHackMe

   Points and completed rooms.

   +180

   points
   60% of the gap
4. Connect GitHub

   Public tooling, exploits and the code you shipped.

   +160

   points
   53% of the gap
5. Review another hacker's work

   Accepted peer review adds small points and proves you can judge other hackers' reasoning.

   +15

   points
   5% of the gap
6. Land another confirmed report

   10 confirmed reports already. Reports have no ceiling; confirmed impact keeps moving the rank.

   +360

   points
   closes the gap