Dipu1A Top Security Researcher of the Month | Security Researcher Profile

Researcher reputation:  790

Real name:
Md. Nur A Alam Dipu

About me:
Bug bounty hunter.

https://hackerone.com/dipuhasan
https://bugcrowd.com/nuraalamdipu

Contact email:
[email protected]

Alternative Contacts:
[email protected]

Certifications & Diplomas:
CSE

Experience in Application Security
3-5 years

Award / Bug Bounty I prefer:
btc,paypal,bank, payoneer

Paypal : paypal.me/dipuhasan
wise : wise.com

Halls of Fame:
Yahoo,Dell,oracle,intel,eset,sony etc

Recommendations and Acknowledgements | Full List:

    23 May, 2022

     waffel67 Waffel67 from focus-www:

Thanks a lot for your support Dipu1a, for finding a problem with some of our websites, disclosing it responsibly and responding quickly to emails with guided examples! The errors sholud be fixed.

    15 March, 2022

     drlippman David from WAMAP:

Thank you for identifying and reporting an XSS vulnerability.

    31 December, 2021

     sgenevrier Sandrine from Journal des Palaces:

@Dipu1A found vulnerabilities on one of our websites, thanks to his report we were able to fix them quickly.

    13 December, 2021

     IsT18666799 T.Ishi from NINJAL:

Dipu1A found a XSS vulnerability on our website. We appreciate his accurate analysis and advices!

    10 December, 2021

     ishiT18666799 T.Ishi from NINJAL:

Dipu1A found a XSS vulnerability on our website. We appreciate his accurate analysis and advices!

    1 December, 2021

     EplayerTv Alexander from ePlayer:

Very good researcher, also provides clear instructions how to easily fix issue.

    24 November, 2021

     chrisbeach Chris Beach from caption.me:

Thank you Dipu1a for finding an issue with my site, responsibly disclosing it and responding quickly to emails. The bug is now fixed.

    24 November, 2021

     PremiumKofi Kofi Agyemang Sakyi from Confidential:

I recommend Dipu for discovering a bug on our website. We really appreciate his efforts

    31 October, 2021

     JohnCKelly John from SB:

Thank you for providing details on an XSS vulnerability.

    28 October, 2021

     ITDept56037604 IT Dept from Abacus:

Dipu1A responsibly disclosed an issue with our site configuration. The clear description allowed us to fix it quickly. Many thanks!

    18 October, 2021

     UUCSIRT Hans Liss from Uppsala University:

Thank you, Dipu1A, for identifying and reporting an XSS vulnerability on one of our web pages!

    8 September, 2021

     cunnin6 Ivan from Wings:

We'd like to thank Dipu1A for helping us to improve our page safety. Quick communication, accurate reporting, wonderful to work with.

    30 August, 2021

     VitaliyKolosWDL Vitaliy from WDL:

Dipu1A found vulnerabilities on one of our websites, thanks to his report we were able to fix them quickly. Our team is incredibly grateful for your help!

    26 July, 2021

     j_ratzenboeck Jürgen from jobs.at:

Dipu1A identified an open redirect issue on our website. Thanks to his prompt answer providing an example, I could find the bug and fix it. Thank you!

    4 July, 2021

     top10vpn JP Jones from Privacy.co:

Dipu1A identified an issue with an open redirect on our site. Clear example provided enabling a quick fix. Thank you Dipu1A!

    6 June, 2021

     advertester Frank from IT Service:

Thanks for bringing the bug on one of our websites to our attention.

    4 May, 2021

     WhatFontIs Alex Cuibari from FFonts:

Thank you Dipu1A for your help to make our website safer. Alex

    20 April, 2021

     dbo_tweets Claude Errera from bungie.org:

Thanks to Dipu1A for finding a security issue with our website, and being so responsive to questions while we fixed it!

    18 March, 2021

     bryanlteague Bryan Teague from University of San Diego:

The researcher discovered and reported the bug to Bug Bounty. The researcher was very responsive, answering my email quickly, and providing me with clear instructions to verify the issue directly on my website. This helped me to verify that the XSS issue had not been patched, and to forward the report to the developer who to fix the issue. They did excellent work, and were clear, concise and polite.

    12 March, 2021

     UsraWebmaster USRAWebmaster from USRA:

Thank you for your responsible disclosure of the XSS vulnerability.

    20 February, 2021

     healsdata Jon from Personal Blog:

Thanks to Dipu1A for identifying an issue on my personal blog and helping to make it much safer!

    6 February, 2021

     kirgsdotcom Ryan Kirgan from OIC:

Thanks to Dipu1A for the helpful, super responsive assistance in help secure the website.

    2 February, 2021

     IPD_Akita IPD_Akita from Information Planning Division,Akita Prefectural:

Dipu1A has found some issues on our website. He immediately provided the necessary information. It was very helpful. Thank you.

    1 February, 2021

     IPD_Akita IPD_Akita from Information Planning Division,Akita Prefectural:

Dipu1A has found some issues on our website. He immediately provided the necessary information. It was very helpful. Thank you.

    8 December, 2020

     h_ono hono from DBCLS:

Great work, thanks for finding a bug and kindly reporting it.

    16 November, 2020

     scottagunn Scott from Forward Movement:

Thank you! Appreciate the help finding the vulnerability and then verifying that it was fixed. Your communication was professional, prompt, and courteous.

    15 October, 2020

     bunnstuff Victoria Clare from Tropic Breeze:

Many thanks for the information that allowed us to fix two issues with our website, Nur

    12 October, 2020

     VijayA11443463 ITSecurity from Empinfo:

Thanks to Dipu1A for identifying and promptly providing us the details of an issue on our website and making it much safer.

    21 July, 2020

     peterblask Peter from Kickit:

Excellent work finding and reporting bugs. Clear, concise, polite. Thanks a bunch!

    24 June, 2020

     ITStaff8 Tech Staff from OHS:

Dipu1A found some issues with our website, and responded very quickly with the necessary information to fix them. Very helpful. Thank you!

    12 June, 2020

     adrivo6 Mike from adrivo:

good and fast communication, thanks for your help and support

    1 May, 2020

     PaulfKen IT Team from University College Dublin:

Thanks Dipu1A, the concise details of the vulnerability will help us to revolve the risk. Keep up the good work and thanks for helping to keep the internet and online information safe.

    29 April, 2020

     darcyf1 Darcy from DarcyF1:

Concise and comprehensive explanation of issue, steps to resolve and provided confirmation of patch. Much appreciated pro-active contributor to web security from our little community.

    20 April, 2020

     conbinijapan Tanaka from Conbini:

Thank you for identify a XSS bug and providing examples of the issue. Quick and accurate communication.

    25 March, 2020

     dcoz99 David from HP Computer Museum:

Very helpful in identifying and assisting in the resolution of XSS and SQL injection issues.

    6 March, 2020

     Paul58787858 Paul from TradeDuck:

Thank you for the help and guidance on vulnerabilities. We walked through a batch of codes and performed update related to the XSS. Once again thank you for the invaluable experience and assistance on this.

    16 February, 2020

     gaborvitez Gabor Vitez :

Dipu1A found a few vulnerabilities on our website and provided all the details needed to fix them. Thank you!

    3 February, 2020

     ITChristopherIL Christopher from Illinois:

Thank you Dipu1A for helping identify a XSS bug and providing clear examples of the issue. That helped us resolve the issue and improve the safety of our website.

    17 July, 2019

     Gratilog Pierrard from Gratilog.net:

Thanks for your work and your explainations.

    15 July, 2019

     ultravibe Andrew Mazzocchi from WTOP:

I run a team that is very security conscious, but even so things sometimes slip by. Dipu’s attention helped us identify and fix a vulnerability we should have caught. His attention to things like this is most valuable and appreciated.

    30 April, 2019

     ziduniwien Computer Center from University of Vienna:

Dear Dipu1A, The University of Vienna would like to thank you for your valuable contribution in finding multiple website security issues. Your input is highly welcome and helps to raise the security level of our educational institution. Servus and greetings from Vienna, Austria.

    25 April, 2019

     mlerley Mike Lerley from SMTnet:

Thanks for finding these vulnerabilities!

    20 February, 2019

     PHPDev8 Developer from TPCS:

Quick and accurate communication. Wonderful to work with.

    17 February, 2019

     JimM97459222 Jim M from GH:

Thanks Dipu1A... I had no idea how easy it was to have a XSS vulnerability. Much thanks for pointing it out.

    5 February, 2019

     m0nd Raymond from University of the West Indies Cave Hill Campus:

I\'d like to offer much thanks to Dipu1A for helping to identify an xss bug in the university\'s website. He provided info to me about the vulnerability as well as how to prevent it in the future.

    27 December, 2018

     JamilaHanan Jamila Hanan from MedWorm:

Contacted me regarding a couple of weaknesses on MedWorm that he found, that I fixed and he then tested. Much appreciated!

    20 December, 2018

     HNiederhuber Harald Niederhuber from Austrian Parliament IT Department:

We got a self initiated message from Dipu1A on the contact form of our website. Asking for details we were provided very quick advice indicating the vulnerability and what to do. That helped us very efficiently to fix the issue. Thanks a lot for all!

    21 November, 2018

     simtkportal Joy from SimTK:

Thanks Dipu1A for helping us improve the security of our website.

    9 November, 2018

     evergreen_uk Andrew from Evergreen:

Thanks Dipu1A for providing information on preventing attacks to one of our customer websites.

    23 May, 2018

     veraneumeyer_oe Vera from Open-E:

We'd like to thank Dipu1A for helping us to improve our page safety against phishing attacks.

Honor Badges

Number of Secured Websites

10+ Websites	50+ Websites	500+ Websites	WEB SECURITY VETERAN 1000+ Websites

Advanced Security Research

WAF Bypasser	CSRF Master 30+ Reports	AppSec Logic Master 30+ Reports	Fastest Fix Fix in 24 hours

Outstanding Achievements

Secured OBB	OBB Advocate	Improved OBB

Commitment to Remediate and Patch

Patch Master 55% Patched	Patch Guru 65% Patched	Patch Lord 75% Patched

Recommendations and Recognition

REPUTABLE 10+ Recommends	FAMOUS 25+ Recommends	GLOBALLY TRUSTED 50+ Recommends

Distinguished Blog Author

1 Post	3 Posts	5+ Posts

Research Statistics

Total reports:	34417
Total reports on VIP sites:	1162
Total patched vulnerabilities:	6812
Total vulnerabilities on Hold (Open Bug Bounty):	2341
Recommendations received:	50
Active since:	24.03.2018
Top VIP Security Researcher Awards:	Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Month Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week Top VIP Security Researcher of the Week

Open Bug Bounty Certificate

Reported Vulnerabilities

All Submissions VIP SubmissionsFeatured Submissions