Blog Posts from Pradip Bhattarai (Pradeep Bhattarai) mainly covering Penetration Testing (Pentesting), Cloud Security (AWS), and DevSecOps!
Active Directory delegation is one of those features that makes complete sense on paper and causes constant headaches in practice. It solves a real problem. It's also misconfigured in almost every env
Initial Reconnaissance The challenge presents itself as the "Intigriti Secure Search Portal", an interface with a search box and a "Report it to Admin" link. That report link is the classic signal: th
Pentester Nepal, a leading cybersecurity community in Nepal, recently celebrated its 12th anniversary on August 16, 2025, at Ullens College in Lalitpur. The free event featured expert talks on bug bounty hunting, AI governance, OAuth attacks, and mor...
Introduction During Bugcrowd CTF at Black Hat USA 2025, I tackled a web challenge involving SecureFile Solutions, a document management system with a hidden Local File Inclusion (LFI) vulnerability in its index.php. This journey involved exploiting t...
In this Capture The Flag (CTF) challenge, we were given access to two main targets: an SSH server running on a GoTTY shell and a NAS interface that allowed file uploads. My initial analysis revealed two key pieces of information. First, the SSH serve...
So, this is the continuity story of me handling the CTF deployment for Pentester Nepal's 11th Anniversary. During the deployment, I provisioned the EKS cluster and added the addon for the EBS CSI driver as I had done similar previously too. I first s...
Minikube: Introduction Minikube is a lightweight Kubernetes implementation for quickly setting up a single-node Kubernetes cluster. We can deploy the cluster as a VM, or a container. This is only for educational purposes only and if you forget to set...
Network security refers to the practice of protecting computer networks from unauthorized access, attack, or damage. It involves implementing various technologies, policies, and procedures to ensure the confidentiality, integrity, and availability of...
AWS IAM Identity and Access Management (IAM) is an AWS service that helps to provide access control to AWS resources. IAM should and is used to control authentication and authorization. AWS IAM can be used to can specify who and what can access servi...
AWS VPC Amazon Virtual Private Cloud (VPC) is a virtual network that can be used to create and manage networks in the cloud. It allows the launching of Amazon Elastic Compute Cloud (EC2) instances and other resources in a defined virtual network. A V...
Active Directory Active Directory is a directory service used by organizations to store information about their users, computers, and other network resources. It's used primarily to provide a secure way to manage users, applications, and network reso...
Auditing AWS Resources The few controls that are needed to be audited to ensure the security of AWS resources are: Identity and access management (IAM): IAM is a central component of AWS security. You should audit your IAM policies and user accounts...
AWS Cloud Amazon Web Services is a cloud platform provided by Amazon, providing on-demand cloud computing platforms and APIs on a metered pay-as-you-go model. AWS provides services like compute and storage, content delivery, security management, netw...
Summary The challenge started with the web page accepting cmd parameter with only env command input. The output of the environment included AWS_ACCOUNT_ID and AWS_ROLE. After obtaining the credentials with assume-role, listing the available S3 bucket...
Summary The challenge started with the description along with the Terraform state file. This challenge involved the misconfiguration within the AWS policy allowing any AWS account to perform multiple actions against the vulnerable AWS service configu...
Recently, security researcher Max Kellermann discovered a critical vulnerability in the Linux kernel that has been affecting all versions since 5.8, including Android devices. This vulnerability, dubbed "Dirty Pipe," has the potential to lead to priv...
As the name suggests, a blockchain is a chain of blocks that contains information of hash. A blockchain is a distributed ledger that is completely open to anyone. This technique was originally described in 1991 by a group of researchers and was orig...
You might be annoyed with low-quality WordPress themes which are available for free. There are tons of premium WordPress themes available. But, you also don’t want to spend on purchasing themes. So, what’s the option? You will be using nulled premium...
OWASP Top 10 is the standard awareness document for developers and security analysts which represents the security risks to web apps. A1:2017:Injection is listed at the top of web app security risks. A1:2017-Injection When the untrusted data is sent ...