@h4xthan
I love to break websites...
27
Labs solved
14
Flags captured
#8
Ranking
$2,390
Total bounty
Monthly streak
0 consecutive months · 0/2 this month — 2 left to keep it
year 2026
Achievements · 9/31
Top Ranking
Currently top 8
Cazador de Labs
14 labs resueltos
Bounty Hunter
$890 € en bounties acumulados
Políglota
6 categorías VOC distintas
Maratón
3 labs en 24h
Writeups · 0
No writeups yet
// @h4xthan hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
Activity
last 90 days
// track_record
Labs solved
27 labs
self_svg_XSS — Self-XSS → Bot-Assisted ATO via SVG upload
Stored XSS via SVG File Upload
IDOR via Predictable Checkout IDs
HTTP Method Override & Admin Bot Exploitation
Open Redirect con Referer Check + Domain Bypass (@)
IDOR + CORS Chain Attack
SSRF via HTML Injection in PDF Generation
Client-Side Permission Bypass + SVG XSS + Cookie Theft
Client-Side Path Traversal to Admin Password Change
Blind SSRF with Internal Headers