@Mah3Sec
Account based inIndia!
About this account
- Account based in
- India
- Connected via
- India App Store
X says this location may be affected by a proxy or VPN.
Account-level information from X, not a live location or the device used for a specific post.
🕉️ 🚩| Security Engineer🇮🇳 | 3 CVE | CRTP | CEH |Secured 200+ Companies
Rajsamand, Rajasthan
Joined September 2019
- Tweets2.8K
- Following435
- Followers2.8K
- Likes3.6K
Pinned Tweet
Corruption. Broken education. Poor infrastructure. A dying environment. Every taxpayer can see what's happening.
My patriotism is for my country, not any political party. As citizens, we have every right to question the government. Accountability is their duty. #neetleak
Mahendra Purbia retweeted
Meet Darknet MCP 🌍
Open-source dark web & threat intelligence for AI agents.
68 MCP tools. One local dashboard.
Security researchers & builders worldwide: try it, share feedback, contribute, or star the repo.
github.com/Vinaysati/Darknet…
#CyberSecurity #MCP #darkweb #hacking
🤖 Made with AI
I failed my first CRTO attempt.
7 days later, I came back with a better process, better preparation, and a very different mindset.
I wrote about what went wrong, what I changed, and what I learned from the experience.
Same knowledge. Different discipline.
🔗 mah3sec.medium.com/my-crto-2…
#CRTO #RedTeam #CyberSecurity #InfoSec @_ZeroPointSec
We hear “SBOM” everywhere these days.
But when a critical vulnerability hits an open source dependency, can your team quickly answer:
“Are we using it?”
An SBOM can help answer that question.
In our first ForgeGuardian security series, we're breaking down what an SBOM actually is, why it matters, where it fits into software supply chain security, and how ForgeGuardian supports it.
A practical introduction for anyone working with modern software supply chains.
Read the full article below linkedin.com/pulse/sbom-we-a… #SBOM #SoftwareSupplyChain #CyberSecurity #AppSec #DevSecOps #OpenSource #SoftwareSecurity
Mahendra Purbia retweeted
Me and my friend @jaimin2709 started #ForgeGuardian as a weekend experiment around one question:
Can we build a practical, open-source defense layer for software supply-chain attacks?
3 months later, we're putting it out in the open. 🚀
🔎 8 detection engines
🌍 9 ecosystems
🛡️ 223+ detection signatures
💻 CLI + Dashboard
🔒 Offline-first
New threat → New detection → Shared with the community.
Try it. Break it. Tell us what we’re missing.
👉 GitHub: github.com/Mah3Sec/ForgeGuar…
📚 Docs: forgeguardian.dev/docs/
#CyberSecurity #SupplyChainSecurity #AppSec #OpenSource #infosec #supplychain #devops #secdevops #dev
Me and my friend @jaimin2709 started #ForgeGuardian as a weekend experiment around one question:
Can we build a practical, open-source defense layer for software supply-chain attacks?
3 months later, we're putting it out in the open. 🚀
🔎 8 detection engines
🌍 9 ecosystems
🛡️ 223+ detection signatures
💻 CLI + Dashboard
🔒 Offline-first
New threat → New detection → Shared with the community.
Try it. Break it. Tell us what we’re missing.
👉 GitHub: github.com/Mah3Sec/ForgeGuar…
📚 Docs: forgeguardian.dev/docs/
#CyberSecurity #SupplyChainSecurity #AppSec #OpenSource #infosec #supplychain #devops #secdevops #dev
You don’t need to hack a company anymore.
Just compromise something the company already trusts.
Dependencies. CI pipelines. Package registries. Update systems.
medium.com/@mah3sec/they-did…
#infosec #cybersecurity #leadership #secdevops #devops #founders
4 months paying Anthropic and I cracked it:
Launch model →genius, basically a hacker's best friend.
Nerf Sonnet 4.6. Nerf Opus 4.6. Tell no one.
Drop Opus 4.7 →"we fixed everything!"
An AMD senior director complained publicly. Anthropic's response was a new model.
#Anthropic
🍪 Stole the admin's cookie on @intigriti Challenge 0326 — and wrote up exactly how I did it.
XSS → payload craft → cookie theft → flag 🚩
Full writeup 👇
mah3sec.medium.com/how-i-sto…
#BugBounty #XSS #CTF #Intigriti #WebSecurity #pentest
"Dojo #49 - Secret manager"? Pwned! It was a blast on @YesWeHack!
Think you can take it on? 🌟
dojo-yeswehack.com/challenge…
#YesWeHack #ChallengeAccepted
Noticed a recurring issue on HackerOne: some triage responses feel AI-generated and reference a different vulnerability than what was reported, despite a clear PoC and category. #BugBounty
After mediation the issue is resolved but still i suggest that triage team should read report first and dont depend on AI based summary as. just depending on AI doesn’t help to become a good triage. And i think im not the only one who faced this issue with triage #BugBounty
Mahendra Purbia retweeted
I’ve been facing a serious, recurring safety issue with my @VolkswagenIndia virtus car from the very first day of delivery. Despite multiple complaints and service visits, nothing has been fixed and now it has caused a major highway accident. Sharing everything here 👇
Built a JS secrets hunter for my testing workflow 🔍 Nothing new - just a more structured version of existing JS recon tools:
✅ Auto discovery
✅ 40+ patterns
✅ Multi-threaded
✅ Clean output
github.com/Mah3Sec/JSHawk
#bugbountytips #infosec #CyberSecurity #PenTest
Mahendra Purbia retweeted
Read “Unauthenticated Kibana Dashboard Access — A Serious Security Risk You Can’t Ignore“ by Pratik Dabhi on Medium: infosecwriteups.com/unauthen…
#bugbounty #infosec #hacking
Mahendra Purbia retweeted
The @Hacker0x01 Hacking Meetup in Udaipur was 🔥Hackers teamed up, hacked on a live target, and shared tons of knowledge! 💻🤝
Virtual week is still on — bring your A-game! 💪 Top hackers will score exclusive swag 🎁
#HackerOne #BugBounty #UdaipurMeetup
