active · since April 2026
HackerXSS
@h4xthan
I love to break websites...
27
Labs solved
14
Flags captured
#16
Ranking
$2,390
Total bounty
Weekly streak
0 consecutive weeks
last 26 weeks
solved
this week
missed
1 lab a week keeps it alive
achievements_unlocked
Achievements · 9/31
progress
29%
PLATA
Veterano
6 meses en BBLABS
BRONCE
Top Ranking
Currently top 16
BRONCE
Cazador de Labs
14 labs resueltos
BRONCE
Bounty Hunter
$890 € en bounties acumulados
BRONCE
Políglota
6 categorías VOC distintas
published_writeups
Writeups · 0
No writeups yet
// @h4xthan hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
XSS
6
Open Redirect
4
API Abuse
4
Business Logic
4
CSRF
4
SSRF
4
IDOR
2
Path Traversal
2
Activity
last 90 days
less
more
// track_record
Labs solved
27 labs
Medium$750
self_svg_XSS — Self-XSS → Bot-Assisted ATO via SVG upload
XSS
Apr 2026completed
Medium$750
Stored XSS via SVG File Upload
XSS
Apr 2026completed
Hard$500
IDOR via Predictable Checkout IDs
Business LogicIDOR
Apr 2026flag
Medium$200
HTTP Method Override & Admin Bot Exploitation
CSRFAPI Abuse
Apr 2026flag
Medium$140
Open Redirect con Referer Check + Domain Bypass (@)
Open Redirect
Apr 2026flag
Hard$50
IDOR + CORS Chain Attack
IDORBusiness Logic
May 2026flag
HardNo reward
SSRF via HTML Injection in PDF Generation
SSRF
May 2026flag
HardNo reward
Client-Side Permission Bypass + SVG XSS + Cookie Theft
Business Logic
Apr 2026flag
HardNo reward
Client-Side Path Traversal to Admin Password Change
Path Traversal
Apr 2026flag
HardNo reward
Blind SSRF with Internal Headers
SSRF
Apr 2026flag
