Pramod Sargar 🇮🇳

503 :(

[Nicolas Krassas @Dinosn]

38 researchers red-teamed AI agents for 2 weeks. Here's what broke. (Agents of Chaos, Feb 2026) AI Security https://t.co/qYDS8XwS5J

[JS0N Haddix @Jhaddix]

Inspired by @uwu_underground …

@arcanuminfosec is releasing our first EP! Our Prompt Injection Taxonomy (PIT) EP has three tracks!

1. Prompt Injextion
2. </system>
3. Link Injection Lullaby

SoundCloud Link in comment, enjoy! 😉

[Debangshu 🇮🇳🥷 @ThisIsDK999]

https://t.co/iv0BOKtuxv

Can't find research like these nowadays, everyone too busy to chase AI hype, no one really diving into libraries for cool bugs :/
AI-will-find-all-bugs is such a boring take.

[Somdev Sangwan @s0md3v]

This website has 50 vulnerabilities and it doesn't tell you which ones.

https://t.co/fp81KxaIxU

If you are a beginner and have already gone through popular labs and resources, this is perfect for practice.

[ADG PI - INDIAN ARMY @adgpi]

"प्रहाराय सन्निहिताः, जयाय प्रशिक्षिताः"
Ready to Strike, Trained to Win.

#IndianArmy

[Debangshu 🇮🇳🥷 @ThisIsDK999]

no hate but compared to the insane number of @Hacker0x01 ambassadors, the concentrated effort is see is only in BLR region.
Rest are just lifeless.

[Pramod Sargar 🇮🇳 @impramodsargar]

🌐 Passionate about securing the digital frontier? Let’s hear you!

[SecurityBoat Community @sb_c0mmunity]

Share your expertise with the #Securityboat_Community!

Join us as a #speaker for an engaging session, panel discussion, or #workshop at our next #meetup in #Pune, #Hyderabad, or #Bengaluru. Let's shape the future of #cybersecurity together!
Register: https://t.co/IwKgyfXX1k

[SecurityBoat Community @sb_c0mmunity]

The Hyderabad Chapter of the SecurityBoat Community is looking for volunteers to help spread awareness about cybersecurity, plan cybersecurity-related events, and work with experts.

Register at https://t.co/xg0e8qSZp7 to grow more! #volunteer #hyderabad #community

[SecurityBoat Community @sb_c0mmunity]

Join us on Nov 30, 2024 at Microsoft Reactor Bengaluru for an exciting SecurityBoat Community meetup!

🎤 Debraj Basak - Phantom Code: In-Memory Execution
🎤 Shubhangi Joshi - Staying Safe & Secure with GenAI
⏰ Time: 10 AM - 2:30 PM
Register: https://t.co/UJCZf0Vu3I
#SB #Meetup

[SecurityBoat Community @sb_c0mmunity]

🚨 Step Into the World of Cutting-Edge Cyber Knowledge! 🚨

We are back with an unmissable meetup in Pune on Nov 24, 2024 at Ideas to Impact.

🔗 Register Here: https://t.co/g094hUOUz1

#infosec #malwareanalyis #securityboat #pune #cybersecurity #pentesting #threatscape

[s1r1us @S1r1u5_]

Pick a niche, become an expert, find bugs maybe even 0days or reverse n-days, and write blogs. Even if you don’t hit those $100k bounties, it’ll be a stepping stone toward a $100k job.

What niche? How to pick? Examples?

infosec being so vast from web3 sec to web2, mobile, desktop, recon, client-side, server-side, cryptography and so on. These are umbrella terms, but if we zoom in, there are specific areas where spending a lot of focused time will make you a top 20 expert -- 100% sure.

The key thing is, that the current top 20 experts in any niche will eventually be replaced as they get bored or burned out. This leaves room for you, and the easiest way to pick a niche is to learn from an existing expert in the niche, take inspiration, and grind to build on top of it.

1. For instance, I got into the client-side JS niche by following @terjanq’s work. From there, I went down even further to focus specifically on ElectronJS.

2. Another example: @rootxharsh and @iamnoooob their niche is in reversing n-days and finding new ones based on that knowledge. I don’t think anyone in India can compete with them on reversing n-days, writing blogs, and submitting findings to bounty programs.

3. And off the top of my head, @ajxchapman, from his tweets, seems to have a specific niche in V8 n-day exploits. I don’t think there’s anyone else in the web security scene who can write V8 exploits 😅.

4. Like @orange_8361 , pick a complex target and grind on it for months eventually uncovering mind-blowing findings.

5. Or, like @albinowax, choose a complex specification, such as HTTP, and find bugs from every aspect of it from top to bottom
(Sorry for tags xD)

I could list so many more people, but my point is this: if you look at the top bug bounty hunters or experts, there’s a pattern. Their blogs or tweets consistently focus on a specific niche (or two) for years and years. No one ever becomes a pro in a night.

How to Become an Expert in a Specific Niche?

Spend a lot of time. There’s no shortcut. Follow the work of the expert you picked for inspiration, read their blogs, dive into the blogs they learned from, and explore everyone else in that specific niche. Solve CTFs and write about them.

For example, not to make it all about myself, but just as an example. I’ve read every blog from the people I listed as inspirations(https://t.co/5MCSPeoygf) while learning client-side security.

If it’s taking time to understand, you’re likely on the right path. That’s where most people give up, so keep pushing. Just dedicating days to it will put you ahead of at least 100 others. It’s that simple.

Expert = Spent Time × IQ

Find Bugs or 0days, Reverse n-days, and "Write Blogs

Once you’re an expert, finding bugs will start to feel natural. But let’s be real, sometimes you might not get lucky. When that happens, reverse other n-days and write about it. I mean write about anything. Nothing gives you as much exposure as writing blogs: you’re helping others, plus you’re building a network that will eventually help you land a $100k job or $100k bounties.

[Kuldeep Pandya @kuldeepdotexe]

How I Took Over All Mail Operations Of A Client

A thread. 🪡🧵

#bugbounty #infosec #javascript

1/n

[0xdf @0xdf_]

Made a cheatsheet list with all my most posts that match up to @TJ_Null's list of HackTheBox machines that are helpful with various OffSec exams. Currently covers three versions of OSCP, OSEP, and OSWE.

https://t.co/1lxq9shXxn

[James Kettle @albinowax]

Param Miner 1.51 is now out in the BApp store! In case you missed it, Param Miner now uses timing analysis to detect hidden parameters, and help detect & exploit reverse proxies. Let me know if it finds you anything cool :)

[Pramod Sargar 🇮🇳 @impramodsargar]

@mytechceoo @SPY8OY 😂

[Bipin Jitiya @win3zz]

Don’t blindly run scripts

I found fake CVE-2024-5932 RCE PoCs on GitHub. One Python script contained malicious code that clones a repo, executes a shell script, and then cleans up. The shell script downloads and sets up xmrig to run at startup using cron and starts crypto mining

[SecurityBoat Community @sb_c0mmunity]

🌟Join us for the SecurityBoat Community Monthly Meetup in Pune this August.

Speakers:
✨ @ThisIsDK999 - Bug Bounty Hunter
✨ Vaibhav Gaikwad- Security Consultant

🔗 Register here: https://t.co/lVrWdgPacO

#infosec #cybersecurity #pune #pentesting #bugbounty

[Pramod Sargar 🇮🇳 @impramodsargar]

Clutch in the last hours💪 @ThisIsDK999 @4_N_K_1_T @kn1ght_yagami #ctf

[Debangshu 🇮🇳🥷 @ThisIsDK999]

Done and dusted with @Bugcrowd #blackhat CTF w/ @Str4awHats - 12th Place.

Missed Top 10 by the narrowest of margins!

Good work guys! <3
@impramodsargar
@kn1ght_yagami
@4_N_K_1_T

Was just hoping to make Top 25 but adrenaline rush got us +500 points in last few hours!

#ctf

[Pramod Sargar 🇮🇳 @impramodsargar]

Congratulations 🥳

[Debangshu 🇮🇳🥷 @ThisIsDK999]

100k$ on @Bugcrowd finally :)

Big thank you to everyone who contributed to this journey.

@_rajesh_ranjan_ @Assass1nmarcos @ArmanSameer95 and all my other friends <3

(might not be as big of a number but it's a total milestone for me 🌟 :)