Chandrapal Badshah | Security Engineer on Chandrapal Badshah

For the last few weeks I’ve been trying to sandbox agents on my machine.

I wanted to build a SOC agent.

LLMs have been around for a while now.

TL;DR: Allow attendees to politely decline the conference freebies.

I recently spoke with a close friend who’s been in the security industry for over a decade.

A growing SaaS company contacted me after a serious AWS breach.

TablePlus published a blog post on how they did nothing to handle a DDoS attack.

Least privilege is a defense-in-depth strategy that everyone talks about.

How to get started in cybersecurity?

AWS WAF service is an L7 firewall service offered by AWS.

The much-awaited AWS re:Inforce 2023 videos have finally landed on YouTube.

AWS SES is used in multiple ways - automated reminders, marketing emails, security automation & alerts, etc.

I’m a huge fan of the Cloud Custodian tool.

GitHub’s Dependabot feature allows you to detect and fix vulnerabilities in code dependencies for all your repositories (public and private).

Removing secrets from git repo is straightforward.

If you listen to anyone discussing AWS security, you probably heard about Amazon GuardDuty.

CloudQuery and Steampipe have very similar functionalities.

AWS WAF might be your first layer of defense for attacks on websites hosted on AWS.

Most of the applications I see these days heavily depend on APIs.

Dangling DNS records are not something new.

Gitleaks has become quite popular.

Every time I want a cloud managed message queue, I would look at AWS SQS service.

When you give access to developers to create firewall rules, they generally open all sorts of ports to the internet.

As part of my research, I wanted a way to find all the DNS records which points to a particular IP address.

If your company uses AWS Route53 to manage DNS records of its domains, there might a situation where you want to find which IAM user created / modified which DNS record.

You don’t know what you got until it’s gone.

Wait.

Setting up a pentest environment for a single Android application to test its functionalities is simple.

Today I was assigned a task to create user accounts on an EC2 instance (Ubuntu) and also add SSH public keys to the respective user account’s authorized key list.

Recently I came across multiple AWS S3 buckets with directory listing enabled.

List of slidedecks and videos of my talks in past: 2025 Cloud Breach Tactics: Enumeration to Initial Access (Workshop @ Vulncon) [Slides] LLMs from Scratch for Security Engineers (Talk @ SecurityBoat Community) [Video] [Slides] 2024 With infinite scale co…