@flyingwhales
51
Labs solved
27
Flags captured
#2
Ranking
$11,990
Total bounty
Monthly streak
3 consecutive months · 2/2 this month
year 2026
Achievements · 16/31
Top Ranking
Currently top 2
Bounty Hunter
$9.5K € en bounties acumulados
Cazador de Labs
27 labs resueltos
Constancia Mensual
3 meses consecutivos
Maratón
6 labs en 24h
Writeups · 0
No writeups yet
// @flyingwhales hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
Activity
last 90 days
// track_record
Labs solved
51 labs
Business Logic Error - Payment Bypass via Client-Side Trust Abuse
Stored XSS to Domain Takeover
Web Cache Poisoning → XSS con bypass de WAF → ATO one-click del asesor
Payment Bypass via Business Logic Flaw
self_svg_XSS — Self-XSS → Bot-Assisted ATO via SVG upload
Stored XSS via SVG File Upload
DOM XSS via postMessage → eval (cross-origin admin pwn)
Reflected XSS via `auth_url` + admin DM bot + cookie exfil
IDOR via Predictable Checkout IDs
Open Redirect via Backslash Bypass + Header Drag