Devender Rao

Building @PandaONEsec : AI-powered application security for founders. Hack your own app before hackers do.

[Devender Rao @root_rao]

Today, I'm excited to finally share what we've been building: PandaONE.

We started with a simple belief:

The best person to hack your application should be you.

We've already tested PandaONE with multiple startups, and honestly, the results were insane.

Seeing what was actually exposed—and what could potentially put an entire startup at risk—reinforced why we're building this.

You spend years building your startup.

Don't lose everything overnight because of something you didn't know was exposed.

If you want to know what an attacker can actually see in your application, check out @pandaONEsec .

We're now open for Early Access.

Apply now →
https://t.co/zsM68xG2vk

Hack Your Own App.

[Devender Rao @root_rao]

@16vchq Building @pandaONEsec an automated application security platform + developers and security teams.

https://t.co/p7IQDqUs6l

[Devender Rao @root_rao]

Today, I'm excited to finally share what we've been building: PandaONE.

We started with a simple belief:

The best person to hack your application should be you.

We've already tested PandaONE with multiple startups, and honestly, the results were insane.

Seeing what was actually exposed—and what could potentially put an entire startup at risk—reinforced why we're building this.

You spend years building your startup.

Don't lose everything overnight because of something you didn't know was exposed.

If you want to know what an attacker can actually see in your application, check out @pandaONEsec .

We're now open for Early Access.

Apply now →
https://t.co/zsM68xG2vk

Hack Your Own App.

[Devender Rao @root_rao]

That xkcd isn't a joke anymore

Researchers just popped OpenAI’s community forum using an RCE vulnerability in the ImageMagick/libheif chain. They chained it with an SSO flaw to access internal repos and employee ChatGPT/Codex accounts.

All from a single image upload.

Your attack surface isn’t just your codebase.
It’s:
• Unmaintained dependencies
• Dangling Subdomains
• Image/media processors
• Flawed OAuth chains
• Over permissioned integrations

One weak link becomes the whole attack path.

Hack your own supply chain before someone else does.

#CyberSecurity #AppSec #DevSecOps #InfoSec

[Devender Rao @root_rao]

I was looking at our traffic today and noticed something interesting.

Our app isn’t running WordPress.

Yet one WordPress endpoint received 10.9K requests.

/wp/v2/posts/999999

Bots don’t wait to understand your stack. They just probe what they can find.

This is the kind of traffic founders should actually be watching.

Know what’s hitting your app. Before it matters.

Building @pandaONEsec → Hack Your Own App.

[Devender Rao @root_rao]

49.22 GB RAM. 💀

@googlechrome seriously?
I think it’s time to shift to Firefox completely 🦊

[Devender Rao @root_rao]

just added ,

"Awaiting review" 😃

[Devender Rao @root_rao]

@solotechdev Vercel has WAF these days, so it does provide protection in the paid plan,
But you can also use Cloudflare — even the free plan is enough for CDN, caching, and rules against common attacks. Just enable the proxy in Cloudflare and put your VPS behind it.

[Devender Rao @root_rao]

@JASVANTDHAKED Just hit Early Access — we'd love to have you in! 🚀

[Devender Rao @root_rao]

Today, I'm excited to finally share what we've been building: PandaONE.

We started with a simple belief:

The best person to hack your application should be you.

We've already tested PandaONE with multiple startups, and honestly, the results were insane.

Seeing what was actually exposed—and what could potentially put an entire startup at risk—reinforced why we're building this.

You spend years building your startup.

Don't lose everything overnight because of something you didn't know was exposed.

If you want to know what an attacker can actually see in your application, check out @pandaONEsec .

We're now open for Early Access.

Apply now →
https://t.co/zsM68xG2vk

Hack Your Own App.

[Debangshu 🇮🇳🥷 @ThisIsDK999]

Just gained RCE on an AEM web server (real world) by exploiting GroovyConsole and an exceptional bounty!

In @intigriti !

If you too, want to do super cool hax0r things such as hacking real-world web apps, use my link and sign up today!
https://t.co/VelFffpkEU

🧵...(1/n)

[h13- @hxh13_]

ATTENTION all India based researchers !!!!

Seems like @Hacker0x01 payment partner[@Currencycloud ] is no longer processing INR local & SWIFT (USD) payouts to India as per this post - https://t.co/HPaanDePYj

Kindly update your payout preference in @Hacker0x01

[Devender Rao @root_rao]

Hey Everyone!!

I just Published "A Pen worth 80K"
Another Bug Bounty Program BBP#2

https://t.co/485YXcxPds

#BugBounty #infosecurity #bugbountytips #writeup #bbp #storytime #Bugs #Linux #Burpsuite

[Devender Rao @root_rao]

I just Published BBP#1 (BugBountyProgram Story) Zolo

https://t.co/S0HNhI4Rfk

Follow for more :)
#bugbounty #linux #Security #hacking #story

[Vivek Ramachandran @vivekramac]

Hello All - we've been working on some really cool stuff at SquareX. try it out: https://t.co/L5xLDNfIdb @getsquarex

[Ajay Magar 🇮🇳 @Ajay__magar]

Nuclei as a Dast In CI/CD & K8s

https://t.co/Po9E2lCGHN

@Hacker0x01 @Bugcrowd @pdiscoveryio @pdnuclei
@intigriti @yeswehack
#bugbountytips #DevOps #AWS #Kubernetes #docker

[Vivek Ramachandran @vivekramac]

Amazing reception for Hackers: Superheroes of the Digital Age #1!

You can download a copy here: https://t.co/t59WE0JB23

Please leave a review in the comments if you read it! I would love to hear your feedback.

#hackers #hacking #comics

[Anugrah SR 📌| #HackLearnDaily @cyph3r_asr]

📢Android Pentesting

This Script will automate the process of installing all necessary tools & tasks for Android Pentesting

👉Moving the Burpsuite Certificate
👉Installing Adb frida server
👉APKs like proxy toggle, proxydroid, adbwifi.

Link: https://t.co/H4Rf6iwiVq

#infosec

[Harsh Goenka @hvgoenka]

हम सब मिलकर हिन्दु���्तान बनें …beautifully expressed

[Vivek Ramachandran @vivekramac]

The most common question I get from our students is:

How do i get my dream job?

Here is a 'hack' to get your dream job: 👇👇👇