Sheikh M.Mujtaba Javed

Cybersecurity Researcher | Full Stack Dev | Tech Enthusiast | Always learning & building. #CyberSecurity #TechInnovation

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

Peter Steinberger's 2 sentences hit 6.5M views. Boris Cherny (Head of Claude Code, Anthropic) said it on stage the same week.

"Stop prompting. Start designing loops."

They're right — and loops are a new attack surface.

Harden the inputs. Bound the scope. Secure the loop.

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

This post + its design were built by a system I made this weekend.

→ Canva MCP connected to my AI coding agent
→ 2 skills: LinkedIn copy + design optimization
→ 1 prompt: topic in → post + Canva graphic out

The AI didn't just write. It ran the whole workflow.

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

Apprentice Lvl 18 here 👋

Not a 24/7 grinder, but I make time to learn,
open the lab, solve it, and move on. Consistency over hype.

#HTBXP @hackthebox_eu
VIP+ Annual would help keep that consistency going.

Entry is public ✅

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

Finally gave my portfolio a fresh update ✨

A lot of effort went into refining the design, performance, and overall experience.

Check it out & let me know what you think 👇
https://t.co/xtPESNtOCp

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

View my verified achievement from @learningatcisco. https://t.co/qsShP4N08o via @credly

[shirish @shiri_shh]

VERCEL just got breached.

They’re selling internal DB + employee accounts + GitHub/NPM tokens for $2M on BreachForums.

looks like someone got early access to Claude Mythos 💀

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

Alhamdulillah! 🌙 Finished Rank #3 in Ramadan Prompting Nights — 2999/3000 pts across 323 participants. Every mistake, hack & trick that took me from #14 to Top 3 is documented 👇

https://t.co/03x1i6RSoF

#RamadanPromptingNights #GIAIC #PromptEngineering

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@viktoroddy DESIGNROCKET

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@shinemeriz #letsconnect

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@VincentiusOnX Hi 👋

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@Bugcrowd Unrestricted File Upload
Extension is checked, but original filename is used unsanitized:
'uploads/' . $filename // user-controlled → path traversal or double extension attack

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@tec_sany Gemini

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@justbyte_ this one

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@hackthebox_eu SSTI (Server-Side Template Injection)
The email is directly concatenated into the Jinja2 template:
python"<p>Hi " + email + ",</p>"
So an attacker can craft an email like {{7*7}}@x.com to execute code.

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@sysxplore learn to Exploit windows 🤧 this is what I does

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

Silence broken! After exams I’ve finished both phases of the AI Spec-Driven Hackathon 1!

Built via Spec-Driven Development: Modular Book (Docusaurus) RAG Chatbot (@FastAPI , @qdrant_engine , Neon, Gemini LLM) Tools: @claudeai

Live: https://t.co/7EUIMp3RGd

#AI #SpecDriven #RAG

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@hackinghub_io Wifi pineapple

[Google VRP (Google Bug Hunters) @GoogleVRP]

New to hacking? Curious how to break things? 🕵️‍♂️✨

Google CTF Beginner's Quest 2025 is LIVE! 🚀

Tackle challenges crafted to get you started. Sign up, join the fun, and secure your spot on the leaderboard! 🏆

👇

https://t.co/dBiEIG8lIb

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@tryhackme Lock In 🔒💯🔥!!!

[Sheikh M.Mujtaba Javed @Mujtaba_Javed_]

@jacobrodri_ ⚡️