CR
active · since May 2026
HackerXSS
@crash
19
Labs solved
10
Flags captured
#23
Ranking
$1,300
Total bounty
Weekly streak
0 consecutive weeks
last 26 weeks
solved
this week
missed
1 lab a week keeps it alive
achievements_unlocked
Achievements · 9/31
progress
29%
BRONCE
Top Ranking
Currently top 24
BRONCE
Cazador de Labs
10 labs resueltos
BRONCE
Bounty Hunter
$550 € en bounties acumulados
BRONCE
First Blood
1 first bloods
BRONCE
IDOR Hunter
5 labs IDOR
published_writeups
Writeups · 0
No writeups yet
// @crash hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
XSS
4
IDOR
4
BAC
3
Business Logic
3
API Abuse
3
SSRF
3
Auth Bypass
2
CSRF
2
Information Disclosure
1
Path Traversal
1
Activity
last 90 days
less
more
// track_record
Labs solved
19 labs
Medium$750
Stored XSS via SVG File Upload
XSS
May 2026completed
Hard$500
IDOR via Predictable Checkout IDs
Business LogicIDOR
Sep 2026flag
Hard$50
IDOR + CORS Chain Attack
IDORBusiness Logic
Sep 2026flag
HardNo reward
Web Cache Deception & BAC in /uploads
Auth BypassBAC
Sep 2026flag
MediumNo reward
Enumeración de artefactos internos vía la API de listado de una media library
BACInformation DisclosureIDOR
Sep 2026flag
EasyNo reward
CSRF Password Change
CSRF
Sep 2026completed
MediumNo reward
NASA - Rails Approval Bypass via Mass Assignment
Auth BypassAPI AbuseBAC
Sep 2026flag
MediumNo reward
SSRF Internal Network Scanning & Credential Exfiltration
SSRF
Aug 2026flag
EasyNo reward
SSRF with Corporate Token Exfiltration
SSRF
Aug 2026flag
HardNo reward
Blind SSRF with Internal Headers
SSRF
Jul 2026flag
