Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷
California
Joined January 2014
- Tweets15.1K
- Following1.1K
- Followers254K
- Likes17.7K
Thrilled to welcome @OpenAI as another target for Prompt2Pwn, our live hacking event at #NahamCon2026! 🎯
Only a few in-person tickets remain. Apply for a free tickets 👉🏼 nahamcon.com
Ben Sadeghipour retweeted
@NahamSec Great video, I love the idea you proposed about making reputation portable between platforms!
youtu.be/QY-fWrU5Mp4?si=RwmZ…
HackerOne Limited Me to 3 Reports After 12 Years youtu.be/QY-fWrU5Mp4
Ben Sadeghipour retweeted
Is prompt injection solved? Here’s $300,000 to find out.
In partnership with @AnthropicAI, @Meta, @GoogleDeepMind, @Reflection_ai and our other frontier lab sponsors, @GraySwanAI is excited to announce the largest and most realistic AI red teaming challenge to date.
Indirect Prompt Injection: Black ⚫
Can hidden text trick a social media manager’s AI into posting? @GraySwanAI's $300K challenge is backed by major AI labs. Everyone gets a performance certificate and top players may get invited to a network for paid red-team work.
More info 👉🏼 bit.ly/gsipib #ad
Excited to have @metabugbounty as a part of this year’s in person #nahamcon2026 and Prompt2Pwn live hacking event! 🙏🏼
Signed to attend our first ever in person edition here
forms.gle/3BCCfuki869Nt1sZ9
I miss the days when hai didn't exist to bully me on @Hacker0x01 when I want to file a report.
An AI agent reading through some of my old JavaScript files from my @CaidoIO projects just pulled 10,000+ records that I could read/write to, including: name, DOB, email address, and more.
Here's the 3-step way it got there 🧵👇
Funny thing is I had briefly looked at that post a while ago and either didn't see that header or it was recently added in.
Anyway, I reported it and it's been triaged. Shoutout @CaidoIO. This literally came out of projects i already had open. 🙏
The reason why I tell people to build their methodology or any tooling on VDPs isn't because I advocate for free work or enjoy hacking VDPs myself.
So if you are a beginner, you won't be able to make progress. In contrast, a VDP seems easier to find bugs on. Whether it's through automation, prompting or just manually hacking.