I am writing and sharing this article after ten months of taking the GitLab Certified Security Specialist exam. GitLab recently revamped it under a different title that’s more accurate and…
I see myself preparing my first blog post of 2025 almost after passing mid year and reflecting a relatively quiet year of public contributions in Information Security. This research was…
I think application security is very much a friend of the cloud security because at all conditions they move in lockstep to keep things safer in the production world. I…
Introduction I vividly remember the days when directory listing was regarded as a significant issue during penetration testing engagements. As a penetration tester, another challenge was identifying creative ways to…
My inaugural experience with the Google Cloud Platform dates back to 2017. Embarking on the journey to become a Google Cloud Professional Security Engineer (GCPSE) may not seem extraordinary at…
On September 3rd, 2022, We organized the very first meetup of OWASP Kathmandu local chapter. Our(I and Corrupted_brain) minds were bursting with hundreds of ideas to make the event interesting…
Medium is a blog hosting platform where a user can write their ideas and share them with a mass number of people. The great thing about medium is “Simplicity” everything…
I have always wondered what it takes to secure the AWS cloud from the next day of passing the Azure Security Engineer Associate exam. The purpose behind both exams is…
During the Vulnerability Assessment Penetration Testing(VAPT) assessment of an organization’s assets, I encountered an interesting issue that led to flaws observed in all the projects accomplished by the Vendor/Development agency….
Healthcare is one of the most sensitive and essential industries around the globe. As a result, information systems in healthcare are often targeted by cybercriminals. It is a large industry…