Pritesh Mistry

Senior Penetration Tester | Security Analyst

[Pritesh Mistry @pritesec]

I just published my writeup about How an incident gave us $$$ bounty.
If you have any query feel free to DM me.
https://t.co/gH6FwOwf2b

[Nick Mykhailyshyn 🇺🇦 @whoareme33]

I earned a $22,500 bounty from Airbnb using a custom Opus 4.7 workflow built with MCP and Skills.

It feels like bug bounty hunting has changed forever

[nisarga @ni5arga]

I had hacked CBSE's OSM (On-Screen Marking Portal) in February and had reported the vulnerabilities to CERT-In, but they were unable to patch most of them.

I've written a detailed blog post about it here: https://t.co/qyT23GkTEJ

[Behi @Behi_Sec]

Nice write-up!

$148,337 RCE in Google Cloud Production.

https://t.co/B3oLUlvojO

[Valentin Ignatev @valigo]

🚨 BREAKING 🚨
Infamous Russian hacker and beatboxer exposes exactly how hackers got access to private GitHub repositories

[TrendAI Zero Day Initiative @thezdi]

Aaaand it's official! Orange Tsai (@orange_8361) of DEVCORE Research Team chained 3 bugs to achieve Remote Code Execution as SYSTEM on Microsoft Exchange, earning a whooping $200,000 and 20 Master of Pwn points. Full win! #Pwn2Own #P2OBerlin

[NDevTK @ndevtk]

Bug write-up for "Google AI Studio XSS" https://t.co/ubhArPvSl0 (ﾉ*･ω･)ﾉ

[Pritesh Mistry @pritesec]

@BugBountyDEFCON @Romilpatel1988 @sho3hit

[Romil Patel @Romilpatel1988]

@BugBountyDEFCON GET /fetch?url=http://127.0.0.1/hackthebox/vip-license HTTP/1.1
Host: https://t.co/91orOPiJgr

X-Hacker-Friends: @cyberx00t @akshit_mokani @pritesec

[s1r1us (mohan) @S1r1u5_]

when react2shell hit last year, i think vercel handled it brilliantly.

to protect their users, they paid $50,000 for every bypass researchers could find. we decided to participate, and ended up earning $170,000.

read how we did it here: https://t.co/2dM6Mf9PHU

[Bipin Jitiya @win3zz]

You don't find luck. You collide with it by moving.
In 2021, a hunter pulled a $50,000 bounty just by digging into an Electron app and checking what most people skip.
Keep moving. Keep looking. Big bugs hide in unexpected places.
Ref: https://t.co/sWlSUYjjgG

[Pingiskok @pingiskok]

Every JWT writeup online covers 2–3 attacks and stops.
I got tired of jumping between 40 blog posts, so I wrote the whole thing. All in one place.
https://t.co/iCSzQ4GjcS

#infosec #appsec #bugbounty #websec #jwt

[Shadan @skshadan_]

I just gave Claude Code a rooted Android phone…

It autonomously reverse-engineered Subway Surfers, hooked the coin logic, bypassed the anti-cheat, and gave itself UNLIMITED coins in ONE session.

[Anthropic @AnthropicAI]

Introducing Project Glasswing: an urgent initiative to help secure the world’s most critical software.

It’s powered by our newest frontier model, Claude Mythos Preview, which can find software vulnerabilities better than all but the most skilled humans.
https://t.co/NQ7IfEtYk7

[null Ahmedabad (n|u Ahmedabad) @NullAhm]

🔥Happening this Saturday at NULL Ahmedabad.

How to actually find and report your first bug. Security of AI agents. P2P systems with live tools and demos.

📅 28 March | 10 AM

RSVP now 👉 https://t.co/M6fmUTG8P8

@null0x00 @OreoB1scuit @imhardikrathod @amanverasia
#nullAhm

[Tom Dörr @tom_doerr]

Native iOS reverse engineering suite

https://t.co/qXRtf2BRxE

[Tom Dörr @tom_doerr]

Audits exposed Swagger API endpoints

https://t.co/gbNfuoRl0a

[NullSecurityX @NullSecurityX]

Bypass Facebook SSL Version (latest version) Frida JS Script
https://t.co/7gcPGHd27g

#Bugbounty #CyberSecurity

[Secfortress @Secfortress]

https://t.co/PPnnpaEXwb

Got blocked by cloudflare while using burp proxy, this subreddit helped!!

[Pritesh Mistry @pritesec]

I'd love to hear your feedback. Feel free to DM me if you have any questions.

🔗 Check out the blog: https://t.co/KiN3JCLaxw

[Pritesh Mistry @pritesec]

I'd love to hear your feedback. Feel free to DM me if you have any questions.

🔗 Check out the blog: https://t.co/KiN3JCLaxw