Gopesh Sharma

| | India♥️

[Gopesh Sharma @MrSharmaX]

Achievement unlocked 👽
Finally under top 100 on #bugcrowd.
#bugbounty

[Gopesh Sharma @MrSharmaX]

@GodfatherOrwa @Athul_m_s How'd you come up with umbraco-FUZZ?

[Amr Elsagaei @amrelsagaei]

Client-side bugs are still one of the most overlooked areas in bug bounty.

In this video, I break down postMessage from first principles.
How it works, where it fails, how developers mess it up, and how to exploit it step by step.

🎥 Client Side 01: postMessage Bugs
🔗 https://t.co/CVIJZrwaHw

#BugBounty #WebSecurity #ClientSideSecurity #JavaScript #EthicalHacking #AmrSec

[André Baptista @0xacb]

With a single command, xnldorker gathers dork results from multiple search engines.

Another nice tool by @xnl_h4ck3r

Github link 👇
https://t.co/MrpQRxqGV7

[Gopesh Sharma @MrSharmaX]

Loved the swag pack @Bugcrowd
Lego set -10/10
T-shirt - 2/10
Why bug bounty platforms give 💩 quality t-shirts?

[Gopesh Sharma @MrSharmaX]

@Bugcrowd On @Smartsheet when their program was Public on bugcrowd.

[Gopesh Sharma @MrSharmaX]

We shared first rank with The Black Hat Cartel. It was super fun collaborating with you guys!
@krishnsec @0xMstar
Last three days were thrilling.
Congratulations to @GodfatherOrwa @XHackerx007 as well!

[bugcrowd @Bugcrowd]

The Crowd always finds a way to surprise us 😈

After weeks of fierce competition, the crown is being shared between 𝑻𝒉𝒆 𝑩𝒍𝒂𝒄𝒌 𝑯𝒂𝒕 𝑪𝒂𝒓𝒕𝒆𝒍 and 𝑶𝒏𝒆 𝑷1, co-champions of this year’s Hacker Showdown: Mind Cathedral.

🫱🏆🫲

Collaboration came through BIG this year. That’s what makes the Bugcrowd community the best there is! 💥🧡

[Gopesh Sharma @MrSharmaX]

Just finished Cocoon and it blew my mind. 🌀
Huge appreciation to @CarlsenGames and team for crafting such a brilliant game.
The puzzles, the dimensional shifts, the silent storytelling, everything was perfectly woven together.
An absolute masterpiece. Must try👌#CocoonGame

[Gopesh Sharma @MrSharmaX]

@krishnsec 🤣🤣 Thanks for your 1% collaboration!

[Gopesh Sharma @MrSharmaX]

Next round’s target: One P1 a day! 🤩

[Kanhaiya Sharma @krishnsec]

We made it to the top 3 🙌
@MrSharmaX @0xMstar

[Gopesh Sharma @MrSharmaX]

@h4x0r_dz @qatarairways Lol! You were attending a hacking event and probably other hackers were also staying in that Hotel! 🤣

[Gopesh Sharma @MrSharmaX]

@HusseiN98D @Burp_Suite Add only that endpoint to scope and apply match/replace to scope only.

[Debangshu 🇮🇳🥷 @ThisIsDK999]

Dropping gems 🫡

[encodedguy - jsmon.sh @3nc0d3dGuY]

Searching https://t.co/IEusFeCho4 returned around 78.8K JS URLs in less than a second. Previously https://t.co/URCUJO3R7b was giving nothing in response.

JS Explorer will become a game changing tool for BB hunters and security researchers now! 🚀

[Gopesh Sharma @MrSharmaX]

@krishnsec @0xMstar @RogueSMG I agree @krishnsec
Report 2-3 bugs at a time and then wait till they get accepted or duplicated. That gives an idea about how the program treats researchers.

[Gopesh Sharma @MrSharmaX]

It’s not a bug, it's a feature! 😆#bugbounty #hackerone

[Gopesh Sharma @MrSharmaX]

@arpitjain__ @mybmc @mybmcWardKE @BJYM4parle @OurVileParle @ZeeNewsEnglish @dailyjanmat @republic @mnsadhikrut @RoadsOfMumbai @Dev_Brahmachari @Mumbaikhabar9 @narendramodi What happened was wrong and shouldn’t have happened but don’t say that they don’t see illegal mandir or masjids. This is what politicians want. Divide and Conquer.
They only see money. Same thing can be done to other religions structures if someone is paying them to do so.

[Gopesh Sharma @MrSharmaX]

@ArmanSameer95 @Bugcrowd @elmehdimee @Ebrietas0 That's craaaazyy!! Congratulations bro! ❤️

[Gopesh Sharma @MrSharmaX]

@RootxRavi @Bugcrowd Under 100 soon!

[Gopesh Sharma @MrSharmaX]

@Bugcrowd Triager’s mercy😂 JK bugcrowd support is always there even if they merciless. 😇

[Gopesh Sharma @MrSharmaX]

@krishnsec Auth bypass king!