XL
active · since July 2026
HackerBAC
@xl4n
10
Labs solved
0
Flags captured
—
Ranking
$7,350
Total bounty
Weekly streak
0 consecutive weeks
last 26 weeks
solved
this week
missed
1 lab a week keeps it alive
achievements_unlocked
Achievements · 0/31
progress
0%
No achievements yet
// this hunter hasn't unlocked any achievement yet
published_writeups
Writeups · 0
No writeups yet
// @xl4n hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
BAC
4
Auth Bypass
3
XSS
2
Open Redirect
2
Business Logic
1
IDOR
1
Path Traversal
1
CSRF
1
API Abuse
1
Activity
last 90 days
less
more
// track_record
Labs solved
10 labs
Hard$4,450
Business Logic Error - Payment Bypass via Client-Side Trust Abuse
Business Logic
Jul 2026completed
Insane$1,500
Wizard Takeover ATO ( IDOR + CSRF )
CSRFIDORBAC
Jul 2026completed
Insane$600
DOM XSS via postMessage → eval (cross-origin admin pwn)
XSS
Jul 2026completed
Hard$500
Reflected XSS via `auth_url` + admin DM bot + cookie exfil
XSS
Jul 2026completed
Hard$300
Open Redirect via Backslash Bypass + Header Drag
Open Redirect
Jul 2026completed
EasyVDP
Open Redirect Playground
Open Redirect
Jul 2026completed
MediumVDP
NASA - Rails Approval Bypass via Mass Assignment
Auth BypassAPI AbuseBAC
Jul 2026completed
HardVDP
Web Cache Deception & BAC in /uploads
Auth BypassBAC
Jul 2026completed
HardVDP
NASA - Client-Side Auth Bypass via Match & Replace
Auth BypassBAC
Jul 2026completed
InsaneVDP
Playground de Client-Side Path Traversal
Path Traversal
Jul 2026completed