nu
@nullbyte
Rank 02VerifiedMarco V. · Portugal · Joined Jul 2024
Breaks login flows for a living: session handling, SSO, token lifetimes and every state machine in between.
AuthenticationSessionsSSOWeb
Reputation
8,860
Valid findings
161
Critical
22
Acceptance
100%
Programs
26
Bounty earned
$212,400
Achievements
First Blood ×10
First valid report on a program.
Authentication & sessions Specialist
Verified skill badge in authentication & sessions.
Top 1%
All-time platform reputation.
Clean Reporter
90%+ acceptance over 100+ reports.
Severity breakdown
Critical22
High51
Medium57
Low31
Notable findings
| Severity | Finding | Program | Bounty |
|---|---|---|---|
| High | Stored XSS in dashboard comments | Northwind | $3,000 |
| High | Privilege escalation via role parameter | Meridian | $4,500 |
| Low | Verbose error leaks stack trace | Fable | $150 |
Activity timeline
RecentlyResolved a high finding on Northwind — awarded $3,000.
EarlierReached Rank 02 on the all-time leaderboard.
Jul 2024Joined datacoconut.