Monthly streak
0 consecutive months · 0/2 this month — 2 left to keep it
year 2026
jan
feb
mar
apr
may
jun
jul
aug
sep
oct
nov
dec
achieved (≥2)
pending
no streak
2 labs with a flag per month to keep it
achievements_unlocked
Achievements · 16/31
progress
52%
ORO
Bounty Hunter
$9.5K € en bounties acumulados
MAX★
Maratón
14 labs en 24h
PLATA
Top Ranking
Currently top 5
PLATA
Cazador de Labs
25 labs resueltos
PLATA
Insane Slayer
4 labs Insane
published_writeups
Writeups · 0
No writeups yet
// @gorka hasn't published writeups yet
Vulnerabilities mastered
top 10 categories
XSS
11
Business Logic
7
CSRF
6
API Abuse
6
Open Redirect
5
IDOR
4
SSRF
4
BAC
4
Auth Bypass
3
Path Traversal
2
Activity
last 90 days
less
more
// track_record
Labs solved
43 labs
Hard$4,450
Business Logic Error - Payment Bypass via Client-Side Trust Abuse
Business Logic
May 2026flag
Insane$1,500
Wizard Takeover ATO ( IDOR + CSRF )
CSRFIDORBAC
Jun 2026flag
Insane$1,200
Stored XSS to Domain Takeover
XSS
Apr 2026flag
Medium$1,000
Payment Bypass via Business Logic Flaw
Business Logic
Apr 2026completed
Medium$750
self_svg_XSS — Self-XSS → Bot-Assisted ATO via SVG upload
XSS
Apr 2026completed
Medium$750
Stored XSS via SVG File Upload
XSS
Apr 2026completed
Insane$600
0-click-ATO — Account Takeover via OTP Brute Force + Email Case-Sensitivity Bypass
API Abuse
Jun 2026flag
Insane$600
DOM XSS via postMessage → eval (cross-origin admin pwn)
XSS
May 2026flag
Hard$500
IDOR via Predictable Checkout IDs
Business LogicIDOR
Mar 2026flag
Hard$300
Open Redirect via Backslash Bypass + Header Drag
Open Redirect
Jun 2026flag