You Forgot, I Remembered: Mass DNS Takeovers on DigitalOcean
I see myself preparing my first blog post of 2025 almost after passing mid year and reflecting a relatively quiet year of public contributions in Information Security. This research was…
AWS S3 POST Policy and Application Logic
I think application security is very much a friend of the cloud security because at all conditions they move in lockstep to keep things safer in the production world. I…
Directory Listing and WordPress: Escalating Old School Bug
Introduction I vividly remember the days when directory listing was regarded as a significant issue during penetration testing engagements. As a penetration tester, another challenge was identifying creative ways to…
Passing Google Cloud Professional Security Engineer (GCPCE)
My inaugural experience with the Google Cloud Platform dates back to 2017. Embarking on the journey to become a Google Cloud Professional Security Engineer (GCPSE) may not seem extraordinary at…
OWASP Kathmandu Secret Badge CTF
On September 3rd, 2022, We organized the very first meetup of OWASP Kathmandu local chapter. Our(I and Corrupted_brain) minds were bursting with hundreds of ideas to make the event interesting…
Taking over the Medium subdomain using Medium
Medium is a blog hosting platform where a user can write their ideas and share them with a mass number of people. The great thing about medium is “Simplicity” everything…
Passing AWS Cloud Security Specialty.
I have always wondered what it takes to secure the AWS cloud from the next day of passing the Azure Security Engineer Associate exam. The purpose behind both exams is…
The Organization, Vendor & Application Security
During the Vulnerability Assessment Penetration Testing(VAPT) assessment of an organization’s assets, I encountered an interesting issue that led to flaws observed in all the projects accomplished by the Vendor/Development agency….
Cybersecurity in healthcare
Healthcare is one of the most sensitive and essential industries around the globe. As a result, information systems in healthcare are often targeted by cybercriminals. It is a large industry…
Flywheel Subdomain Takeover
Flywheel is managed WordPress hosting built for designers and creative agencies to build, scale, and manage hundreds of WordPress sites with ease. One can set up a WordPress site in less…