Not chasing the leaderboard, rank, or points anymore >>
Even though finding multiple bugs every day,
If you see me on the leaderboard, it’s just effortless effort not my priority anymore ✌️
English
Kanhaiya Sharma
3.5K posts
Kanhaiya Sharma
@krishnsec
APPLICATION SECURITY & RECON | Top 5 P1 warriors @bugcrowd | https://t.co/QhMy9MYvrx
Earth 🌏 Katılım Mart 2021
746 Takip Edilen19.8K Takipçiler
Hmm Interesting
HackerOne@Hacker0x01
Today, HackerOne joins Project Glasswing, Anthropic's controlled-access program for Claude Mythos 5. We'll use it to harden our own security and evaluate it across the full CTEM workflow, including discovery, validation, prioritization, and remediation. Two things up front, because researchers will ask. Your reports are not training data. Vulnerability submissions stay where they belong: with the customer and the researcher who found them. And AI is not replacing the bounty model. In the first 6 months of this year, researchers earned approximately $47M in bounties through HackerOne, up 25% year-on-year. More AI on offense and defense means more code shipped, more attack surface created, more reports filed, and more bounty work. What we learn from applying Mythos to HackerOne’s internal scope will be shared with the wider community. Read the announcement. bit.ly/3SW96lx
English
@Bugcrowd your triagers need android training. urgently.
1/ I report a real android bug
2/ triager closes it, doesn't understand the attack
3/ program reopens it, gets the impact instantly
the researcher and the vendor agree. the middle layer doesn't. fix the middle layer.
English
@krishnsec @Bugcrowd Congrats bro, you totally deserve it. Are you still receiving fresh private invites?
English
@Masonhck3571 Yeah but after hunting all day, you eventually get exhausted and have to close the lid anyway and very often these days >>
English
breaking my own rule - dropping multiple P1/P2’s today :(
Kanhaiya Sharma@krishnsec
I’ve decided to cap myself at 5 Critical reports/day and around 2 findings on average . Health comes first, so I’ll be cutting back on hacking time starting today. Time to touch some grass 🍀
English
@Masonhck3571 cool 🔥, btw it’s really tough to hold high/crits for next day :)
English
@krishnsec 🔥🔥🔥🔥🔥🔥🔥🔥🔥🔥 I said the same thing this weekend and dropped 2 crits.
English
Congratulations, @H4cktus, on being the latest researcher to celebrate the $1 million earnings milestone!
From quitting his restaurant job at 19 to 1500 bugs later and a million dollars, Hacktus shares his story.
Read the blog to hear about how he got started, what his take on AI really is, and his advice for those starting out.
bit.ly/3SA5s0E
English
@krishnsec @SonyLIV @FIFAWorldCup Bhai pr World Cup toh Zee 5 pr aa rha h, toh SonyLIV ko tag kyon kiya?
HT
@disclosedh1 @Hacker0x01 jailbreaking in free 👀
wasn’t expecting vdp from such a huge company
English
Anthropic Cyber Jailbreak started using @Hacker0x01 yesterday: hackerone.com/anthropic-cybe… #hackerone #disclosure
English
I made a goal to earn $100K from a single public bug bounty program, and I finally achieved it.
It took time, consistency, and countless hours of learning, but I loved the process and the growth that came with it.
@Bugcrowd #ItTakesACrowd
English
@bishal0x01 @Bugcrowd well it’s not about ai
everyone is using it
English
In June, I ranked #1 on @Bugcrowd leaderboard. I also crossed 299 P1s in total . Dropped multiple P1-P3 this month alone > mostly auth bypasses + bac issues bugcrowd.com/leaderboard/p1…
Thanks to bugcrowd and triage team ❤️
English
@krishnsec @Bugcrowd Congrats bro. How many percent from recon unauth bugs? Thanks
English
@krishnsec @Bugcrowd that's a great achievement, my mate, congrats!! ❤️
English