active · since May 2026
HackerTop 10XSS
@pl4nkton
50
Labs solved
26
Flags captured
#4
Ranking
$12,040
Total bounty
Weekly streak
0 consecutive weeks
last 26 weeks
solved
this week
missed
1 lab a week keeps it alive
achievements_unlocked
Achievements · 14/31
progress
45%
ORO
Bounty Hunter
$9.5K € en bounties acumulados
PLATA
Top Ranking
Currently top 4
PLATA
Cazador de Labs
26 labs resueltos
PLATA
Insane Slayer
5 labs Insane
PLATA
Maratón
8 labs en 24h
published_writeups
Writeups · 0
No writeups yet
// @pl4nkton hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
XSS
11
Business Logic
7
Open Redirect
7
API Abuse
6
CSRF
6
Path Traversal
4
BAC
4
IDOR
4
SSRF
4
Race Condition
3
Activity
last 90 days
less
more
// track_record
Labs solved
50 labs
Hard$4,450
Business Logic Error - Payment Bypass via Client-Side Trust Abuse
Business Logic
Jun 2026flag
Insane$1,500
Wizard Takeover ATO ( IDOR + CSRF )
CSRFIDORBAC
Jun 2026flag
Insane$1,200
Stored XSS to Domain Takeover
XSS
Jun 2026flag
Medium$1,000
Payment Bypass via Business Logic Flaw
Business Logic
Jun 2026completed
Medium$750
self_svg_XSS — Self-XSS → Bot-Assisted ATO via SVG upload
XSS
Jun 2026completed
Medium$750
Stored XSS via SVG File Upload
XSS
Jun 2026completed
Insane$600
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
API Abuse
Jun 2026flag
Insane$600
DOM XSS via postMessage → eval (cross-origin admin pwn)
XSS
Jun 2026flag
Hard$500
IDOR via Predictable Checkout IDs
Business LogicIDOR
Jun 2026flag
Hard$300
Open Redirect via Backslash Bypass + Header Drag
Open Redirect
Jun 2026flag