Himanshu J @jhimansh

Strategy | Security. Recognized and awarded under responsible disclosure program by Microsoft, Google, Red Hat, Zoom and many more in the past. Pune, India Joined May 2015

Tweets

305
Followers

116
Following

355
Likes

3K

Himanshu J @jhimansh

a year ago

Need to extract API endpoints and the request body schema of each endpoint after supplying a web URL as input. Exploring Puppeteer and Cheerio library, but facing accuracy issues affecting data quality. Which library should I use? Suggestions? #appsec #opensource #NodeJS #API

0 0 0 23 0

Hillel Solow @hsolow

3 years ago

What happens to AppSec when moving to an API environment? One of the things that I observed when trying to understand the difference between doing application security and API security, is that we're often pushing business logic out to the client. This…lnkd.in/d3-FFK7F

0 1 1 0 0

Hillel Solow @hsolow

3 years ago

Agentless vs. agent AppSec for SaaS startups Let me start by saying - I know. I know the sound of the word agent probably gives you the shivers. Hear me out. Agents have gotten a really bad reputation in the past years, and in most cases rightfully so…lnkd.in/dQbG6Bt6

0 1 2 0 0

Himanshu J @jhimansh

3 years ago

Thrilled to get an invite to celebrate with Microsoft MSRC's most valuable security researchers and Microsoft employees in Las Vegas next month. #SecurityResearch #infosec #responsibledisclosure #bugbounty #MSRC

2 0 4 0 0

Download Image

SickSec 🇲🇦 🇵🇸 @OriginalSicksec

3 years ago

If your repeater tab is not like this then you are doing something wrong x) #Burpsuite #Bugbounty

17 20 196 0 19

Download Image

shubs @infosec_au

3 years ago

just because an exploit payload looks simple doesn’t mean it didn’t take a bajillion hours of source code auditing to find

6 21 425 0 8

Yash Devkate 🇮🇳 @rootxyash

4 years ago

A thread all about CSRF Tips Pro tip : Bookmark and Retweet this Tweet!

9 363 643 0 389

Himanshu J @jhimansh

4 years ago

Another security report triaged, accepted and resolved. Program: Private. Severity: Medium. #cybersecurity #responsibledisclosure #hacktosecure #informationsecurity

0 0 6 0 1

Download Image

Himanshu J @jhimansh

4 years ago

Thank you @GoogleVRP for the book! Looking forward to reading this one soon. #InformationSecurity #Bugbounty #hacktosecure

0 1 7 0 0

Download Image

Himanshu J @jhimansh

4 years ago

Happy birthday @stokfredrik!🎉 Thank you for the amazing work that you do! Wishing you a wonderful year of good health, happiness and success! Hoping to see many more Bounty Thursdays in the future. Cheers!

1 0 5 0 1

Prof. Feynman @ProfFeynman

4 years ago

Be humble. Be teachable. The universe is bigger than your view of the universe. There's always room for a new idea. Humility is necessary for growth. 🧠

62 6K 21K 0 418

Himanshu J @jhimansh

4 years ago

One of the very first few reports that I submitted to Rockset on Hackerone just got disclosed. A non-admin user could access a page meant to be accessed only by the user with admin privileges. Severity: Medium(4.3) hackerone.com/reports/946384 #informationsecurity #infosec

0 0 1 0 0

publiclyDisclosed @disclosedh1

4 years ago

Rockset disclosed a bug submitted by @jhimansh: hackerone.com/reports/946384 #hackerone #bugbounty

0 3 10 0 2

Download Image

Himanshu J @jhimansh

4 years ago

A submission got accepted as a valid issue by Asana on Bugcrowd. Vulnerability falls under broken access control to information disclosure. Severity: P4 #hacktosecure #responsibledisclosure #bugbounty #infosec #CyberSec #informationsecurity

0 0 5 0 0

Download Image

Louis Nyffenegger @snyff

4 years ago

“Hacking cannot be taught. Hacking can only be learned.” (based on a quote from Mikhail Botvinnik about Chess)

8 53 262 0 14

shubs @infosec_au

4 years ago

I’ve been doing a lot of offensive security source code auditing of enterprise apps over the last six months and every time I show my friends critical pre-auth PoCs they usually respond with “wow i can’t believe no else found that” - the magic is uncovering this attack surface

13 30 352 0 41

🇷🇴 cristi @CristiVlad25

4 years ago

There are little to no good courses or books that go beyond beginner level. And training is very expensive. How do you keep up as an intermediate/advanced then? One answer: by reading boring documentation and figuring out new techniques yourself.

4 3 39 0 4

Fabio Viggiani @fabio_viggiani

4 years ago

🚨ONGOING: we are investigating systems infected with a malicious version of the npm package UAParser.js (7 million weekly downloads). The hijacked package delivers a malware loader and a cryptominer. IOCs below: