🕉️ 🚩| Security Engineer🇮🇳 | 3 CVE | CRTP | CEH |Secured 200+ Companies
Rajsamand, Rajasthan
Joined September 2019
- Tweets2.8K
- Following435
- Followers2.8K
- Likes3.6K
Mahendra Purbia retweeted
Meet Darknet MCP 🌍
Open-source dark web & threat intelligence for AI agents.
68 MCP tools. One local dashboard.
Security researchers & builders worldwide: try it, share feedback, contribute, or star the repo.
github.com/Vinaysati/Darknet…
#CyberSecurity #MCP #darkweb #hacking
🤖 Made with AI
Mahendra Purbia retweeted
Me and my friend @jaimin2709 started #ForgeGuardian as a weekend experiment around one question:
Can we build a practical, open-source defense layer for software supply-chain attacks?
3 months later, we're putting it out in the open. 🚀
🔎 8 detection engines
🌍 9 ecosystems
🛡️ 223+ detection signatures
💻 CLI + Dashboard
🔒 Offline-first
New threat → New detection → Shared with the community.
Try it. Break it. Tell us what we’re missing.
👉 GitHub: github.com/Mah3Sec/ForgeGuar…
📚 Docs: forgeguardian.dev/docs/
#CyberSecurity #SupplyChainSecurity #AppSec #OpenSource #infosec #supplychain #devops #secdevops #dev
Mahendra Purbia retweeted
I’ve been facing a serious, recurring safety issue with my @VolkswagenIndia virtus car from the very first day of delivery. Despite multiple complaints and service visits, nothing has been fixed and now it has caused a major highway accident. Sharing everything here 👇
Mahendra Purbia retweeted
Read “Unauthenticated Kibana Dashboard Access — A Serious Security Risk You Can’t Ignore“ by Pratik Dabhi on Medium: infosecwriteups.com/unauthen…
#bugbounty #infosec #hacking
Mahendra Purbia retweeted
The @Hacker0x01 Hacking Meetup in Udaipur was 🔥Hackers teamed up, hacked on a live target, and shared tons of knowledge! 💻🤝
Virtual week is still on — bring your A-game! 💪 Top hackers will score exclusive swag 🎁
#HackerOne #BugBounty #UdaipurMeetup
Mahendra Purbia retweeted
I just published 🔓 BLE Hacking — Dissect. Decide. Deliver
medium.com/p/ble-hacking-dis…
Mahendra Purbia retweeted
🚗 How I Approach Black-Box Car Pentesting – A Step-by-Step Breakdown
From feature analysis to CAN Bus attacks, here’s how I systematically test a vehicle for vulnerabilities!
Follow this thread to learn something useful about carhacking!👇
#CarHacking #AutomotiveSecurity
Mahendra Purbia retweeted
𝐘𝐨𝐮𝐫 𝐆𝐮𝐢𝐝𝐞 𝐭𝐨 𝐀𝐮𝐭𝐨𝐦𝐨𝐭𝐢𝐯𝐞 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 🚙
🛣️𝗥𝗼𝗮𝗱𝗺𝗮𝗽: github.com/AutoSecurityy/Aut…
📚𝗞𝗻𝗼𝘄𝗹𝗲𝗱𝗴𝗲 𝗕𝗮𝘀𝗲: autosecurityy.gitbook.io/aut…
🏴☠️𝟳𝗗𝗮𝘆𝘀 𝗖𝗵𝗮𝗹𝗹𝗲𝗻𝗴𝗲(Starts on 1st Feb): nas.io/autosecurityy/challen…
#AutomotiveSecurity #hacking
Mahendra Purbia retweeted
🚨 Wiz uncovered CVE-2024-43405, a bypass in #Nuclei enabling code execution. Fixed with @pdiscoveryio. Update to v3.3.2+, Run tools in isolated environments!
Mahendra Purbia retweeted
Automotive Cybersecurity Roadmap 🛣️
nas.io/autosecurityy/product…
Mahendra Purbia retweeted
Hello HackerOne Team, @Hacker0x01
After waiting more than 2 months for a response on my mediation request regarding the Duplicate Report, I would like to respectfully bring to your attention an issue with the duplicate marking of my reports (ID 2737108 and ID 2739243),
Mahendra Purbia retweeted
Introducing, "OSINT Updates" - A free OSINT newsletter delivering what people want to read.
Your weekly dose of OSINT Updates every Wednesday and many more amazing content.
🔗osintupdates.com/
#osint #socmint #osintnews #weeklyupdates #osinttools #osintblogs #webinars
Mahendra Purbia retweeted
😀Introducing the 𝗖𝗔𝗥𝗦𝗦, a simple tool to evaluate and scores cyber risks in automotive systems.
𝗖𝗵𝗲𝗰𝗸 𝗼𝘂𝘁 𝗵𝗲𝗿𝗲: souravbaghz.github.io/carss
#CARSS #AutomotiveSecurity #ISOSAE21434 #TARA
Mahendra Purbia retweeted
Here's my theoretical deep dive into the world of Voltage Fault Injection—where a 'glitch' is more than just a tiny bug. 🐛⚡
Check it out if you're ready to talk circuits, capacitors, and a bit of mischief! 😅👇
baudskidninja.medium.com/my-…
Mahendra Purbia retweeted
Everyone deals with it at some point in #cybersecurity: imposter syndrome. 😤
Let's talk about it - what it is, how to identify it, and how to overcome it.
Dan Berger shares ways you can silence those thoughts - including cultivating a growth mindset and ensuring you have a support system. tcm-sec.com/overcoming-impos…
Mahendra Purbia retweeted
Decoding the proposed changes in The Waqf (Amendment) Bill, 2024.
The Waqf Act, 1995, is set to undergo significant transformations with the introduction of the Waqf (Amendment) Bill, 2024. The proposed amendments aim to enhance governance, boost transparency, and potentially redefine property ownership regulations.
The proposed provisions have the potential to bring much-needed reforms to the Waqf irregularities and meticulous consideration of all associated aspects has been made.
We invite stakeholders, experts, and citizens to share their suggestions and feedback on the Waqf (Amendment) Bill, 2024.
Your inputs will help shape the final amendments and ensure they effectively address the needs of the Waqf.
Please submit your suggestions to [email protected], and together, let's work towards creating a more transparent and accountable system.
Mahendra Purbia retweeted
I've been in the Web3 security space for almost 2 years. Here are 4 easy steps on how to successfully not become a Web3 security researcher:
1- Skip the basics: Why bother with fundamentals? Dive straight into auditing protocols! Practice matters!!!
2- Twitter > Learning: Spend more time marketing yourself as a Web3 security guru than hammering on learning fundamentals, participating in contests, doing CTFs, or developing defensive and offensive mindset.
3- Fake it till you make it: Add "DM FOR AUDIT" to your bio and report groundbreaking findings like "use safeTransfer". You could make a lot of money! (Seriously...) 💸
4- Congratulations!: You've made it! Tons of followers, maybe some cash, but zero real auditing skills.
Mission accomplished! 🏆
You've successfully learned how to fail at becoming a real Web3 security researcher.
Now, for those who actually want to succeed: 👇
Mahendra Purbia retweeted
👾 Ever wondered how secure your MQTT setup really is?
🪄 Dive deep into the art of MQTT Protocol Hacking with my two of Medium articles!
🔗 MQTT in Connected Cars: medium.com/autosecurityy/mqt…
🔗 MQTT Security 101: medium.com/autosecurityy/mqt…
#Cybersecurity #MQTT #IoTSecurity
Mahendra Purbia retweeted
I just published The Intersection of AI, Autonomous Driving, and Cybersecurity link.medium.com/KyD5TOVsuMb
Mahendra Purbia retweeted
Thread On🧵:
Testing for Blind/Non-Blind SSRFs using redirection in integrations where there are some filters.
#bugbountytips #BugBounty #ssrf #bugbountytips
1. Hit the integration by using burp collaborator by using random credentials.
