Mahendra Purbia

🕉️ 🚩| Security Engineer🇮🇳 | 3 CVE | CRTP | CEH |Secured 200+ Companies

[Mahendra Purbia @Mah3Sec]

Built a JS secrets hunter for my testing workflow 🔍 Nothing new - just a more structured version of existing JS recon tools:
✅ Auto discovery
✅ 40+ patterns
✅ Multi-threaded
✅ Clean output
https://t.co/YM4dPSgMx9
#bugbountytips #infosec #CyberSecurity #PenTest

[Mahendra Purbia @Mah3Sec]

Peak PR wording: "A Mythos-class model that we've made safe for general use." 👀 #Ai #claude

[Mahendra Purbia @Mah3Sec]

https://t.co/NCzT0998lF

[Mahendra Purbia @Mah3Sec]

You don’t need to hack a company anymore.

Just compromise something the company already trusts.

Dependencies. CI pipelines. Package registries. Update systems.

https://t.co/wuH022TMWN

#infosec #cybersecurity #leadership #secdevops #devops #founders

[Mahendra Purbia @Mah3Sec]

@MrKryp70n @offsectraining

[Mahendra Purbia @Mah3Sec]

@HarshDRanjan1 @basu_banakar @Hacker0x01 Haa😂

[Mahendra Purbia @Mah3Sec]

@basu_banakar @HarshDRanjan1 @Hacker0x01 @basu_banakar is alive miracle miracle😂

[Mahendra Purbia @Mah3Sec]

@the_IDORminator @rez0__ Nah this AI triage actually hallucinating more for example H1 “HAI”

[Mahendra Purbia @Mah3Sec]

@bug_vs_me

[Mahendra Purbia @Mah3Sec]

@hetmehtaa Anthropic business model

[Mahendra Purbia @Mah3Sec]

Token consumption is high so pay more for extra usage.

[Mahendra Purbia @Mah3Sec]

4 months paying Anthropic and I cracked it:

Launch model →genius, basically a hacker's best friend.
Nerf Sonnet 4.6. Nerf Opus 4.6. Tell no one.
Drop Opus 4.7 →"we fixed everything!"

An AMD senior director complained publicly. Anthropic's response was a new model.
#Anthropic

[Mahendra Purbia @Mah3Sec]

@hackerspider1 @airtelindia Go with any good gaming router I have seen some great ones from asus. I'm planning to replace mine with one as well.

[Mahendra Purbia @Mah3Sec]

@intigriti @Random_Robbie Intigriti offer relocation and visa sponsorship?

[Mahendra Purbia @Mah3Sec]

@zseano

[Mahendra Purbia @Mah3Sec]

@hackerspider1 @Hacker0x01 unfortunately triage is relying on HAI instead of reviewing reports manually. This has happened to me on multiple reports.

[Mahendra Purbia @Mah3Sec]

🍪 Stole the admin's cookie on @intigriti Challenge 0326 — and wrote up exactly how I did it.

XSS → payload craft → cookie theft → flag 🚩

Full writeup 👇
https://t.co/NXbI4zYSPm

#BugBounty #XSS #CTF #Intigriti #WebSecurity #pentest

[Mahendra Purbia @Mah3Sec]

@yeswehack

[Mahendra Purbia @Mah3Sec]

"Dojo #49 - Secret manager"? Pwned! It was a blast on @YesWeHack!
Think you can take it on? 🌟
https://t.co/lt9ykqGz58
#YesWeHack #ChallengeAccepted

[Mahendra Purbia @Mah3Sec]

@one33se7en @Hacker0x01