Nitin Goplani OSCP, CREST CRT, CISSP, CBSP, CCNSE, CTMP

Nitin Goplani OSCP, CREST CRT, CISSP, CBSP, CCNSE, CTMP

دبي الإمارات العربية المتحدة
٨ آلاف متابع أكثر من 500 زميل

انضم لعرض الملف الشخصي

نبذة عني

That high, 10yrs back, when I discovered that first SQL injection vulnerability and for the first time saw the look on the developers face as I explained to him how I could compromise his DB using a simple edition to his SQL query via this simple utility called "Burp", I knew I wanted to feel that HIGH & that sense of satisfaction, again and again, every day.

Since then I have made it my career goal to learn and stay "ahead of the curve" in multiple areas of Product Security, including Application Security testing, mobile security, and network security.

At the risk of the sounding narcissist, this zeal led me to not only be listed on 1000+ (yes thousand plus) Hall of Fame's like Facebook, Google, LinkedIn, Twitter, Yahoo, eBay, Tesla, Uber, Salesforce, Swift, PayPal, most major Banks and Financial institutions, most Blockchain solutions, but this also helped me to be the Top Bug Bounty Hunter on the following platforms:

2015 11th Rank HackerOne (Worldwide)
2015 - 2017 1st Rank Synack Crowd Security Platform (Worldwide)
2016 - 2017 3rd Rank BugCrowd Crowd Security Platform (Worldwide)
2017 HBO Hack the World Winner
2017 – 2019 3rd Rank Cobalt Crowd Security Platform (Worldwide)
2020 1st Rank SlowMist Blockchain Crowd Security Platform (Worldwide)
2020 1st Rank Amazon Souq Hall of Fame (Worldwide till date)

Public CVEs:
CVE-2019-7356 & CVE-2019-7357

I have tried sharing my knowledge via my various articles and have been interviewed by multiple publications the latest one here:
https://mp.weixin.qq.com/s/u7I1ZAveHCMbxbCl23KJ_Q
https://twitter.com/qlcchain/status/1152146498345287680?lang=en

In the last couple of years, my focus has now shifted to helping organizations design and implement their Product Security programs and automate Security in their CI/CD pipelines.
I enjoy working on projects that challenge my ability to think outside of the box, rapidly absorb and adopt new technical skills, and ultimately prepare myself for future challenges that await me.

مقالات Nitin Goplani

النشاط

انضم الآن لعرض كل النشاط

التراخيص والشهادات

  • رسم بياني Certified Cloud-Native Security Expert (CCNSE)

    Certified Cloud-Native Security Expert (CCNSE)

    Practical DevSecOps

    تم الإصدار في ⁦
    معرف الشهادة CCNSE76C243B9
  • رسم بياني Certified Container Security Expert (CCSE)

    Certified Container Security Expert (CCSE)

    Practical DevSecOps

    تم الإصدار في ⁦
    معرف الشهادة CCSE76C243B9
  • رسم بياني Certified Threat Modeling Professional (CTMP)

    Certified Threat Modeling Professional (CTMP)

    Practical DevSecOps

    تم الإصدار في ⁦
    معرف الشهادة CTMP76C243B9
  • رسم بياني Certified Information Systems Security Professional (CISSP)

    Certified Information Systems Security Professional (CISSP)

    (ISC)²

    تم الإصدار في ⁦
    معرف الشهادة 825914
  • رسم بياني CREST Registered Penetration Tester

    CREST Registered Penetration Tester

    CREST - www.crest-approved.org

    تم الإصدار في ⁦
    معرف الشهادة 18531537
  • رسم بياني Offensive Security Certified Professional (OSCP)

    Offensive Security Certified Professional (OSCP)

    Offensive Security

    تم الإصدار في ⁦
    معرف الشهادة OS-101-04942
  • رسم بياني Certified Blockchain Security Professional (CBSP)

    Certified Blockchain Security Professional (CBSP)

    Blockchain Training Alliance

    تم الإصدار في ⁦ تنتهي في ⁦
    معرف الشهادة 0x70470f6dd19c7745a324fc1acdc4326087e54b6c84056b62ecd5c6450fbeb30d
  • رسم بياني Certified Ethical Hacker (CEH)

    Certified Ethical Hacker (CEH)

    EC-Council

    معرف الشهادة ECC955107

المنشورات

التكريمات والمكافآت

  • HBO Hack the World 2017 Winner

    HBO

  • 1st Rank in Souq's Bug Bounty List in the World (2015, 2016 & 2017)

    Souq

    Reported 76 Security Issues.

  • Listed in 4Chan Hall of Fame

    4chan

    https://hackerone.com/4chan/thanks

  • Listed in ANCILE Hall of Fame

    ANCILE

    https://bugcrowd.com/ancile/hall-of-fame

  • Listed in AT&T Hall of Fame

    AT&T

    https://bugbounty.att.com/hof.php

  • Listed in Acquia Hall of Fame

    Acquia

    https://www.acquia.com/how-report-security-issue

  • Listed in Adobe Hall of Fame

    Adobe

    http://helpx.adobe.com/security/acknowledgements.html

  • Listed in Altervista Hall of Fame

    Altervista

    http://en.altervista.org/credits.php

  • Listed in Appcelerator Hall of Fame

    Appceletrator

    https://www.appcelerator.com/privacy/responsible-disclosure-of-security-vulnerabilities/

  • Listed in Apple Hall of Fame

    Apple

    http://support.apple.com/kb/HT1318

  • Listed in Aptible Hall of Fame

    Aptible

    https://bugcrowd.com/aptible/hall-of-fame

  • Listed in Attack-Secure Hall of Fame

    Attack-Secure

    http://attack-secure.com/whitehat/

  • Listed in Badoo Hall of Fame

    Badoo

    http://corp.badoo.com/security

  • Listed in Barracudalabs Hall of Fame (Multiple Times)

    Barracuda

    https://barracudalabs.com/research-resources/bug-bounty-program/bug-bounty-hall-of-fame-2/

  • Listed in Basecamp Hall of Fame

    Basecamp

    https://basecamp.com/security/response

  • Listed in Birst Hall of Fame

    Birst

    http://www.birst.com/security-reporting

  • Listed in Bitcasa Hall of Fame

    Bitcasa

    https://support.bitcasa.com/hc/en-us/articles/202210658-How-To-Responsibly-Report-Security-Concerns

  • Listed in BlackBerry Hall of Fame

    BlackBerry

    http://us.blackberry.com/business/enterprise-mobility/mobile-security/incident-response-team/collaborations.html

  • Listed in Card Hall of Fame

    Card

    https://bugcrowd.com/card/hall-of-fame

  • Listed in Cloudflare Hall of Fame

    Cloudflare

    https://hackerone.com/cloudflare/thanks

  • Listed in ConstantContact Hall of Fame

    ConstantContact

    http://www.constantcontact.com/legal/report-vulnerability

  • Listed in Datocapital Hall of Fame

    Datocapital

    https://en.datocapital.com/report-security-issue.html

  • Listed in DeskPRO Hall of Fame

    DeskPRO

    https://www.deskpro.com/security/

  • Listed in Erasmus University Rotterdam Hall of Fame

    Erasmus University Rotterdam

    http://www.eur.nl/english/erna/information/safe_online/hall_of_fame/

  • Listed in Etsy Hall of Fame (Multiple Times)

    Etsy

    https://www.etsy.com/help/article/2463

  • Listed in EventBrite Hall of Fame

    EventBrite

    https://www.eventbrite.com/walloffame/

  • Listed in Facebook Hall of Fame (Multiple Times)

    Facebook

    https://www.facebook.com/whitehat/thanks

  • Listed in FlowDock Hall of Fame

    FlowDock

    https://www.flowdock.com/thanks

  • Listed in FormAssembly Hall of Fame

    FormAssembly

    http://www.formassembly.com/blog/formassembly-vulnerability-and-security-reporting/

  • Listed in Foxycart Hall of Fame

    Foxycart

    http://www.foxycart.com/security-contact

  • Listed in Freelancer Hall of Fame

    Freelancer

    https://bugcrowd.com/freelancer/hall-of-fame

  • Listed in Gittip Hall of Fame

    Gittip

    https://gratipay.com/security.txt

  • Listed in Google Hall of Fame (Multiple Times)

    Google

    http://www.google.com/about/appsecurity/hall-of-fame/distinction/

  • Listed in Gratipay Hall of Fame

    Gratipay

    https://gratipay.com/about/security/hall-of-fame

  • Listed in Greenhouse Hall of Fame

    Greenhouse

    https://hackerone.com/greenhouse/thanks

  • Listed in InVision Hall of Fame

    InVision

    https://hackerone.com/invision/thanks

  • Listed in Internetwache Hall of Fame

    Internetwache

    https://en.internetwache.org/security/

  • Listed in Logentries Hall of Fame

    Logentries

    https://logentries.com/doc/security/

  • Listed in Mail.Ru Hall of Fame

    Mail.Ru

    https://hackerone.com/mailru/thanks

  • Listed in MailChimp Hall of Fame

    MailChimp

    http://mailchimp.com/about/security-response/

  • Listed in Myntra Hall of Fame

    Myntra

    http://www.myntra.com/security/whitehat

  • Listed in NSN Hall of Fame (Prime Reporter)

    Nokia Siemens Networks

    http://nsn.com/responsible-disclosure

  • Listed in Netflix Hall of Fame

    Netflix

    https://help.netflix.com/en/node/6657#gsc.tab=0

  • Listed in Nokia Hall of Fame

    Nokia

    http://company.nokia.com/en/acknowledgements

  • Listed in NolimitVPN Hall of Fame

    NolimitVPN

    https://bugcrowd.com/nolimitvpn/hall-of-fame

  • Listed in OkCupid Hall of Fame

    OkCupid

    https://hackerone.com/okcupid/thanks

  • Listed in OpenText Hall of Fame

    OpenText

    http://www.opentext.com/who-we-are/copyright-information/security-acknowledgements

  • Listed in Pantheon Hall of Fames

    Pantheon

    https://bugcrowd.com/pantheon/hall-of-fame

  • Listed in Paypal Hall of Fame (Multiple Times)

    Paypal

    https://www.paypal.com/webapps/mpp/security-tools/wall-of-fame-honorable-mention

  • Listed in PinoyHackNews Hall of Fame

    PinoyHackNews

    http://www.pinoyhacknews.com/security

  • Listed in Prezi Hall of Fame

    Prezi

    http://prezi.com/bugbounty/whitehats/

  • Listed in PupperLabs Hall of Fame

    PuppetLabs

    https://puppetlabs.com/security/acknowledgments

  • Listed in PureVPN Hall of Fame

    PureVPN

    https://bugcrowd.com/purevpn/hall-of-fame

  • Listed in ReddAPI Hall of Fame

    ReddAPI

    https://hackerone.com/reddapi/thanks

  • Listed in Ribose Hall of Fame

    Ribose

    https://www.ribose.com/security/hall_of_fame

  • Listed in Security Net Hall of Fame

    Security Net

    http://securitynet.org/security-researcher-acknoledgments/

  • Listed in Shaukk Hall of Fame

    Shaukk

    http://shaukk.com/developers.php

  • Listed in Simple Hall of Fame

    Simple

    https://bugcrowd.com/simple/hall-of-fame

  • Listed in SiteGround Hall of Fame

    Siteground

    https://www.siteground.com/term/92.htm

  • Listed in Skamster Hall of Fame

    Skamster

    http://www.skamster.com/footer/superheroes.php

  • Listed in Smart Budget Hall of Fame

    Smart Budget

    https://www.sbudget.com/people.pl

  • Listed in Socrata Hall of Fame

    Socrata

    https://bugcrowd.com/socrata/hall-of-fame

  • Listed in SplashID Hall of Fame

    SplashID

    https://bugcrowd.com/splashid/hall-of-fame

  • Listed in Sprout Social Hall of Fame

    Sprout Social

    https://bugcrowd.com/sproutsocial/hall-of-fame

  • Listed in StopTheHacker Hall of Fame

    StopTheHacker

    https://hackerone.com/stopthehacker/thanks

  • Listed in Tesla Hall of Fame

    Tesla

    https://www.teslamotors.com/about/legal#tesla-security-researcher-hall-of-fame

  • Listed in Twilio Hall of Fame

    Twilio

    https://www.twilio.com/docs/security/disclosure

  • Listed in Twitter Hall of Fame (Multiple Times)

    Twitter

    https://hackerone.com/twitter/thanks

  • Listed in Uber Hall of Fame

    Uber

    https://www.uber.com/security

  • Listed in Viadeo Hall of Fame

    Viadeo

    http://www.viadeo.com/aide/security/

  • Listed in Wamba Hall of Fame

    Wamba

    http://corp.wamba.com/en/developer/security/?fame

  • Listed in WePay Hall of Fame

    WePay

    https://hackerone.com/wepay/thanks

  • Listed in Yahoo Hall of Fame (Multiple Times)

    Yahoo

    https://hackerone.com/yahoo/thanks

  • Listed in Zendesk Hall of Fame

    Zendesk

    http://www.zendesk.com/company/responsible-disclosure-policy

  • Listed in oDesk Hall of Fame

    oDesk

    https://bugcrowd.com/odesk/hall-of-fame

  • Listed in ownCloud Hall of Fame

    ownCloud

    https://owncloud.org/security/hall-of-fame/

  • Listed on 5th Rank of BugCrowd's All Time Ninjas List - Oct 2014

    BugCrowd

    https://bugcrowd.com/leaderboard

  • Rewarded bby Qiwi Security Team

    Qiwi

    https://qiwi.ru/page/hack.action

  • Rewarded by Algolia Security Team

    Algolia

  • Rewarded by Bitcoin.de

    bitcoin.de

    https://www.bitcoin.de/en/bug-bounty

  • Rewarded by Blackphone Security Team

    Blackphone

    https://bugcrowd.com/blackphone/hall-of-fame

  • Rewarded by BudgetSimple Security Team

    BudgetSimple

    https://www.budgetsimple.com/security

  • Rewarded by Cisco Meraki Security Team

    Cisco Meraki

    https://meraki.cisco.com/trust/#srp

  • Rewarded by Concur Security Team

    Concur

  • Rewarded by Cylance Security Team

    Cylance

  • Rewarded by Dropcam Security Team

    Dropcam

  • Rewarded by Dropmyemail Security Team

    Dropmyemail

    https://www.dropmyemail.com/security

  • Rewarded by EMC2 Security Team

    EMC2

    http://www.emc.com/products/security/product-security-response-center.htm

  • Rewarded by Flexport Security Team

    Flexport

  • Rewarded by Giftcards Security Team

    Giftcards

    http://www.giftcards.com/acknowledgements

  • Rewarded by Glassdoor Security Team

    Glassdoor

  • Rewarded by Heroku Security Team

    Heroku

  • Rewarded by IFIXIT Security Team

    IFIXIT

    https://www.ifixit.com/Info/Responsible_Disclosure

  • Rewarded by ImageOptim Security Team

    ImageOptim

  • Rewarded by Indeed Security Team

    Indeed

    https://bugcrowd.com/indeed/hall-of-fame

  • Rewarded by Jet Security Team

    Jet

    https://bugcrowd.com/jet/hall-of-fame

  • Rewarded by Launchkey Security Team

    Launchkey

    https://launchkey.com/whitehat

  • Rewarded by LinkedIn Security Team

    LinkedIn

    http://help.linkedin.com/app/safety/answers/detail/a_id/37022

  • Rewarded by Magento Security Team

    Magento

    http://magento.com/security

  • Rewarded by Mapbox Security Team

    Mapbox

    https://hackerone.com/mapbox/thanks

  • Rewarded by MobileNation Security Team

    MobileNation

  • Rewarded by Munzee Security Team

    Munzee

    https://hackerone.com/munzee/thanks

  • Rewarded by Mythemeshop Security Team

    Mythemeshop

  • Rewarded by Netherlands Cyber Security Team

    NCSC

    https://www.ncsc.nl/english/current-topics/wall-of-fame.html

  • Rewarded by PagerDuty Security Team

    PagerDuty

    http://www.pagerduty.com/security/disclosure/

  • Rewarded by Privatbank Security Team

    Privatbank

  • Rewarded by RelateIQ Security Team

    RelateIQ

    https://www.relateiq.com/security

  • Rewarded by Roamler Security Team

    Roamler

  • Rewarded by Salesforce Security Team

    Salesforce

  • Rewarded by Sbwire Security Team

    Sbwire

    https://help.releasewire.com//index.php?/Knowledgebase/Article/View/23/0/bug-bounty-program

  • Rewarded by Shoeboxed

    Shoeboxed

    https://www.shoeboxed.com/whitehat/

  • Rewarded by Silent Circle Security Team

    Silent Circle

    https://bugcrowd.com/silentcircle/hall-of-fame

  • Rewarded by Slack Security Team

    Slack

    https://hackerone.com/slack/thanks

  • Rewarded by Souq Security Team

    Souq

    https://hackerone.com/souq/thanks

  • Rewarded by Starbucks Security Team

    Starbucks

  • Rewarded by Starleaf Security Team

    Starleaf

  • Rewarded by Sunrise Calendar Security Team

    Sunrise Calendar

    https://bugcrowd.com/silentcircle/hall-of-fame

  • Rewarded by TNO Security Team

    TNO

  • Rewarded by Tagged Security Team

    Tagged

    https://bugcrowd.com/tagged/hall-of-fame

  • Rewarded by TubeMogul Security Team

    TubeMogul

    http://www.tubemogul.com/compliance/privacy-policy/

  • Rewarded by Yandex Security Team

    Yandex

  • Rewarded by Yelp Security Team

    Yelp

    https://hackerone.com/yelp/thanks

  • Rewarded by iWelcome Security Team

    iWelcome

التوصيات المستلمة

9شخص قدموا توصية لـNitin Goplani

انضم الآن لعرض

المزيد من أنشطة Nitin Goplani

عرض ملف Nitin Goplani الشخصي الكامل

  • مشاهدة الأشخاص المشتركين الذين تعرفهم
  • تقديم تعارف
  • تواصل مع Nitin Goplani مباشرة
انضم لعرض الملف الشخصي الكامل

ملفات شخصية أخرى مشابهة

اكتسب مهارات جديدة من خلال هذه المواد الدراسية

عرض كل الدورات