active · since August 2026
HackerBAC
@gcota
6
Labs solved
4
Flags captured
#47
Ranking
$500
Total bounty
Weekly streak
0 consecutive weeks
last 26 weeks
solved
this week
missed
1 lab a week keeps it alive
achievements_unlocked
Achievements · 3/31
progress
10%
BRONCE
Bounty Hunter
$500 € en bounties acumulados
BRONCE
Maratón
4 labs en 24h
BRONCE
IDOR Hunter
4 labs IDOR
LOCKED
Top Ranking
Reach top 50
LOCKED
Cazador de Labs
4 / 5
published_writeups
Writeups · 0
No writeups yet
// @gcota hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
BAC
3
XSS
2
Information Disclosure
2
IDOR
2
Business Logic
1
API Abuse
1
Auth Bypass
1
Activity
last 90 days
less
more
// track_record
Labs solved
6 labs
Hard$500
IDOR via Predictable Checkout IDs
Business LogicIDOR
Sep 2026flag
EasyNo reward
Reflected XSS on 404 Error Page
XSS
29 days agocompleted
EasyNo reward
Stored XSS in Post Body
XSS
29 days agocompleted
MediumNo reward
Escritura sin autorización en el endpoint de settings de un plugin de page-builder
BACAPI AbuseInformation Disclosure
Sep 2026flag
MediumNo reward
Enumeración de artefactos internos vía la API de listado de una media library
BACInformation DisclosureIDOR
Sep 2026flag
HardNo reward
NASA - Client-Side Auth Bypass via Match & Replace
Auth BypassBAC
Sep 2026flag
