MA
active · since April 2026
HunterIDOR
@maxiolivera
10
Labs solved
9
Flags captured
#13
Ranking
$2,950
Total bounty
Monthly streak
0 consecutive months · 0/2 this month — 2 left to keep it
year 2026
jan
feb
mar
apr
may
jun
jul
aug
sep
oct
nov
dec
achieved (≥2)
pending
no streak
2 labs with a flag per month to keep it
achievements_unlocked
Achievements · 10/31
progress
32%
PLATA
Bounty Hunter
$3.0K € en bounties acumulados
PLATA
Insane Slayer
3 labs Insane
PLATA
Maratón
9 labs en 24h
BRONCE
Top Ranking
Currently top 13
BRONCE
Cazador de Labs
9 labs resueltos
published_writeups
Writeups · 0
No writeups yet
// @maxiolivera hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
IDOR
3
Business Logic
2
XSS
2
SSRF
2
BAC
1
API Abuse
1
Auth Bypass
1
Path Traversal
1
Activity
last 90 days
less
more
// track_record
Labs solved
10 labs
Insane$1,200
Stored XSS to Domain Takeover
XSS
May 2026flag
Insane$600
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
API Abuse
May 2026flag
Insane$600
DOM XSS via postMessage → eval (cross-origin admin pwn)
XSS
May 2026flag
Hard$500
IDOR via Predictable Checkout IDs
Business LogicIDOR
May 2026flag
Hard$50
IDOR + CORS Chain Attack
IDORBusiness Logic
May 2026flag
HardVDP
Web Cache Deception & BAC in /uploads
Auth BypassBAC
May 2026flag
HardVDP
Advanced IDOR Challenges
IDOR
May 2026completed
HardVDP
Client-Side Path Traversal to Admin Password Change
Path Traversal
May 2026flag
HardVDP
SSRF via HTML Injection in PDF Generation
SSRF
May 2026flag
HardVDP
Blind SSRF with Internal Headers
SSRF
May 2026flag