Ben Sadeghipour (@NahamSec) header
Ben Sadeghipour (@NahamSec) profile picture

Ben Sadeghipour

@NahamSec

Cofounder @hackinghub_io | Advisor @CaidoIO. I hack companies and make content about it. #NahamCon organizer. ex @hacker0x01🇮🇷

 California
nahamsec.com
Joined January 2014
  • Tweets15.2K
  • Following1.1K
  • Followers255K
1.9KMedia
Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)Photo by Ben Sadeghipour (@NahamSec)
Someone found SSRF in MCP servers from Google and others. So I rebuilt the bug in a lab and pointed an AI scanner at it. I knew exactly where the vuln was. Did the AI? 📷 youtu.be/PFy0TPjitcY
I Rebuilt a Real World MCP Bug. Can AI Find It?

I Rebuilt a Real World MCP Bug. Can AI Find It?

Can AI find a bug when you already know exactly where it is?Syed ...

youtube.com
18
9
1
132
10,087
Thank you to @snyksec for sponsoring this video. Check out Evo by Snyk: bit.ly/mcpai2026
Security for Agentic AI Applications and Tools | Evo by Snyk | Snyk

Security for Agentic AI Applications and Tools | Evo by Snyk | Snyk

Evo by Snyk secures AI-driven development end to end: govern the agents that write your code, run your AppSec program with a team of security agents, and test your applications like an attacker.

snyk.io
1
710
NahamCon talks stream worldwide Nov 20–21. Prompt2Pwn brings live hacking to Oakland, with targets including OpenAI, Meta, Vercel & Dropbox. We’re building the largest live hacking event of the year. Want in the room? Apply: forms.gle/x8YhgLnGis4F1FjB9 More information ℹ️ nahamcon.com
Image from Ben Sadeghipour (@NahamSec)
6
3
33
3,618
Excited to announce @JohnHammond’s keynote at #NahamCon2026, live at Prompt2Pwn: “Robots Take Over the World (well, at least my world).” Join us Nov 20–21 in Oakland or watch the talks online: p2p.nahamcon.com
Image from Ben Sadeghipour (@NahamSec)
6
9
1
101
10,533
Excited to check this out and maybe do a video on it 👀
Marius du Preez (@mdp_sec) profile pictureMarius du Preez
@mdp_secOct 29
build ur own AI bug bounty hunter, everything i tell people in my DMs

build ur own AI bug bounty hunter, everything i tell people in my DMs

Article · @mdp_sec
4
44
401
22,609
Troubleshooting family member's technology from across the world is peak experience
3
1
86
8,906
Ben Sadeghipour retweeted
Gal Weizman (@WeizmanGal) profile picture
Gal Weizman@WeizmanGalOct 27
Replying to @NahamSec
@NahamSec covered our Downloads research, quite a moment 😊 facebook.com/nahamsec1/posts…
Nahamsec

Nahamsec

Your Downloads folder probably shouldn’t be giving your coding agent instructions. 😬 A malicious AGENTS.md led Codex to install an npm package in researchers’ tests. On the customer’s machine,...

facebook.com
1
7
1,302
My AI hackbot missed this $5,000 bounty. Here's how I fixed it. youtu.be/CRkFArW5jAI
Image from Ben Sadeghipour (@NahamSec)
5
24
249
11,951
Should I do my first ever conference in India? 👀
138
9
5
664
24,327
In case you missed it, we are hosting #NahamCon2026 in person in Oakland with multiple live hacking targets, 15+ amazing speakers, and of course our flagship CTF! Would love to see some familiar faces, especially if you live in the Bay Area!
Image from Ben Sadeghipour (@NahamSec)
6
9
93
7,916
I think these made up for the awful streak of duplicates from last week. 👀
Image from Ben Sadeghipour (@NahamSec)
11
4
281
13,132
Can anyone name a major web framework without a security advisory in the past few weeks?
18
3
87
11,207
Thrilled to welcome @OpenAI as another target for Prompt2Pwn, our live hacking event at #NahamCon2026! 🎯 Only a few in-person tickets remain. Apply for a free tickets 👉🏼 nahamcon.com
Image from Ben Sadeghipour (@NahamSec)
4
4
55
6,498
Ben Sadeghipour retweeted
MrUniverse (@00MrUniverse00) profile picture
MrUniverse@00MrUniverse00Oct 20
Replying to @NahamSec
@NahamSec Great video, I love the idea you proposed about making reputation portable between platforms! youtu.be/QY-fWrU5Mp4?si=RwmZ…
HackerOne Limited Me to 3 Reports After 12 Years

HackerOne Limited Me to 3 Reports After 12 Years

LIKE and SUBSCRIBE with NOTIFICATIONS ON if you enjoyed the video! ...

youtube.com
1
1
9
2,199
HackerOne Limited Me to 3 Reports After 12 Years youtu.be/QY-fWrU5Mp4
HackerOne Limited Me to 3 Reports After 12 Years

HackerOne Limited Me to 3 Reports After 12 Years

LIKE and SUBSCRIBE with NOTIFICATIONS ON if you enjoyed the video! ...

youtube.com
12
9
2
160
21,512
Ben Sadeghipour retweeted
Gray Swan AI (@GraySwanAI) profile picture
Gray Swan AI
@GraySwanAIOct 15
Is prompt injection solved? Here’s $300,000 to find out. In partnership with @AnthropicAI, @Meta, @GoogleDeepMind, @Reflection_ai and our other frontier lab sponsors, @GraySwanAI is excited to announce the largest and most realistic AI red teaming challenge to date. Indirect Prompt Injection: Black ⚫
Image from Gray Swan AI (@GraySwanAI)
27
33
19
219
115,116
Filed 3 PII leaks and a really cool authentication bypass.. but can you guess what happened next? 👇
17
1
215
20,783
Image from Ben Sadeghipour (@NahamSec)
4
41
4,439
Can hidden text trick a social media manager’s AI into posting? @GraySwanAI's $300K challenge is backed by major AI labs. Everyone gets a performance certificate and top players may get invited to a network for paid red-team work. More info 👉🏼 bit.ly/gsipib #ad
Image from Ben Sadeghipour (@NahamSec)
8
101
9,026
Excited to have @metabugbounty as a part of this year’s in person #nahamcon2026 and Prompt2Pwn live hacking event! 🙏🏼
Image from Ben Sadeghipour (@NahamSec)
4
6
84
6,593
Signed to attend our first ever in person edition here forms.gle/3BCCfuki869Nt1sZ9
Application to Attend

Application to Attend

Many will apply, 100 will be chosen to attend. This is a high impact event built around high impact people. Consider that while filling out your application. This event is not designed for everyone,...

docs.google.com
5
1,388
Load more