Pradeep Bhattarai's Blog

Active Directory delegation is one of those features that makes complete sense on paper and causes constant headaches in practice.

I spent an afternoon on this challenge.

Initial Reconnaissance The challenge presents itself as the "Intigriti Secure Search Portal", an interface with a search box and a "Report it to Admin" link.

Pentester Nepal, a leading cybersecurity community in Nepal, recently celebrated its 12th anniversary on August 16, 2025, at Ullens College in Lalitpur.

Introduction During Bugcrowd CTF at Black Hat USA 2025, I tackled a web challenge involving SecureFile Solutions, a document management system with a hidden Local File Inclusion (LFI) vulnerability in its index.php.

In this Capture The Flag (CTF) challenge, we were given access to two main targets: an SSH server running on a GoTTY shell and a NAS interface that allowed file uploads.

So, this is the continuity story of me handling the CTF deployment for Pentester Nepal's 11th Anniversary.

Minikube: Introduction Minikube is a lightweight Kubernetes implementation for quickly setting up a single-node Kubernetes cluster.

Network security refers to the practice of protecting computer networks from unauthorized access, attack, or damage.

AWS IAM Identity and Access Management (IAM) is an AWS service that helps to provide access control to AWS resources.

AWS VPC Amazon Virtual Private Cloud (VPC) is a virtual network that can be used to create and manage networks in the cloud.

Active Directory Active Directory is a directory service used by organizations to store information about their users, computers, and other network resources.

Auditing AWS Resources The few controls that are needed to be audited to ensure the security of AWS resources are: Identity and access management (IAM): IAM is a central component of AWS security.

AWS Cloud Amazon Web Services is a cloud platform provided by Amazon, providing on-demand cloud computing platforms and APIs on a metered pay-as-you-go model.

Summary The challenge started with the web page accepting cmd parameter with only env command input.

Summary The challenge started with the description along with the Terraform state file.

Recently, security researcher Max Kellermann discovered a critical vulnerability in the Linux kernel that has been affecting all versions since 5.8, including Android devices.

As the name suggests, a blockchain is a chain of blocks that contains information of hash.

You might be annoyed with low-quality WordPress themes which are available for free.

OWASP Top 10 is the standard awareness document for developers and security analysts which represents the security risks to web apps.