XL
active · since July 2026
HackerBAC
@xl4n
10
Labs solved
0
Flags captured
—
Ranking
$7,350
Total bounty
Weekly streak
0 consecutive weeks
last 26 weeks
solved
this week
missed
1 lab a week keeps it alive
achievements_unlocked
Achievements · 1/31
progress
3%
BRONCE
Veterano
3 meses en BBLABS
LOCKED
Cazador de Labs
0 / 5
LOCKED
Top Ranking
Reach top 50
LOCKED
Bounty Hunter
0 / 500
LOCKED
Insane Slayer
0 / 1
published_writeups
Writeups · 0
No writeups yet
// @xl4n hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
BAC
4
Auth Bypass
3
XSS
2
Open Redirect
2
IDOR
1
CSRF
1
Path Traversal
1
Business Logic
1
API Abuse
1
Activity
last 90 days
less
more
// track_record
Labs solved
10 labs
Hard$4,450
Business Logic Error - Payment Bypass via Client-Side Trust Abuse
Business Logic
Jul 2026completed
Insane$1,500
Wizard Takeover ATO ( IDOR + CSRF )
CSRFIDORBAC
Jul 2026completed
Insane$600
DOM XSS via postMessage → eval (cross-origin admin pwn)
XSS
Jul 2026completed
Hard$500
Reflected XSS via `auth_url` + admin DM bot + cookie exfil
XSS
Jul 2026completed
Hard$300
Open Redirect via Backslash Bypass + Header Drag
Open Redirect
Jul 2026completed
EasyNo reward
Open Redirect Playground
Open Redirect
Jul 2026completed
MediumNo reward
NASA - Rails Approval Bypass via Mass Assignment
Auth BypassAPI AbuseBAC
Jul 2026completed
HardNo reward
Web Cache Deception & BAC in /uploads
Auth BypassBAC
Jul 2026completed
HardNo reward
NASA - Client-Side Auth Bypass via Match & Replace
Auth BypassBAC
Jul 2026completed
InsaneNo reward
Playground de Client-Side Path Traversal
Path Traversal
Jul 2026completed
