CR
active · since May 2026
HackerIDOR
@crash
19
Labs solved
10
Flags captured
#15
Ranking
$1,300
Total bounty
Weekly streak
3 consecutive weeks
last 26 weeks
solved
this week
missed
1 lab a week keeps it alive
achievements_unlocked
Achievements · 10/31
progress
32%
BRONCE
Top Ranking
Currently top 15
BRONCE
Cazador de Labs
10 labs resueltos
BRONCE
Bounty Hunter
$550 € en bounties acumulados
BRONCE
Constancia Mensual
3 meses consecutivos
BRONCE
First Blood
1 first bloods
published_writeups
Writeups · 0
No writeups yet
// @crash hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
IDOR
4
XSS
4
Business Logic
3
SSRF
3
BAC
3
API Abuse
3
Auth Bypass
2
CSRF
2
Path Traversal
1
Information Disclosure
1
Activity
last 90 days
less
more
// track_record
Labs solved
19 labs
Medium$750
Stored XSS via SVG File Upload
XSS
May 2026completed
Hard$500
IDOR via Predictable Checkout IDs
Business LogicIDOR
14 days agoflag
Hard$50
IDOR + CORS Chain Attack
IDORBusiness Logic
9 days agoflag
HardVDP
Web Cache Deception & BAC in /uploads
Auth BypassBAC
9 days agoflag
MediumVDP
Enumeración de artefactos internos vía la API de listado de una media library
BACInformation DisclosureIDOR
14 days agoflag
EasyVDP
CSRF Password Change
CSRF
14 days agocompleted
MediumVDP
NASA - Rails Approval Bypass via Mass Assignment
Auth BypassAPI AbuseBAC
14 days agoflag
MediumVDP
SSRF Internal Network Scanning & Credential Exfiltration
SSRF
22 days agoflag
EasyVDP
SSRF with Corporate Token Exfiltration
SSRF
22 days agoflag
HardVDP
Blind SSRF with Internal Headers
SSRF
Jul 2026flag