Timeline

I’m thrilled to announce a significant milestone in my cybersecurity journey: the successful completion of 100 penetration tests spanning network infrastructure, web applications, APIs, Chrome extensions, and mobile applications. This achievement is a testament to the dedication and hard work I’ve put into enhancing digital security across a broad spectrum…Read More

PikaTwoo is an exceptionally challenging machine on Hack The Box, described as an “absolute monster of an insane box” by Sheeraz. The journey through PikaTwoo involves a series of complex steps, starting with exploiting a vulnerability in OpenStack’s KeyStone to leak a username. The attacker then discovers an Android application…Read More

At the c0c0n XV conference, an annual cybersecurity and hacking event renowned for gathering experts and enthusiasts from across the globe, I had the privilege of presenting my research on the integration and effectiveness of automated code review systems at scale. My study focused on the utilization of Semgrep, a…Read More

Finding #bugs in #Wordpress plugins & every codebase effectively! 💡Shreya & Sheeraz will present their research on finding WordPress plugin #vulnerabilities like SQLi, XSS & LFI in bulk by using an open-source tool semgrep to write custom rules that ran over 80k WordPress plugins + learn in-depth about secure code practices Find out more➡️ https://www.youtube.com/watch?v=RvKLn2ofMAo

Hey Everyone I will be speaking about Kubernetes 101 in Hack The Box’s Cyber Apocalypse CTF talks. This workshop will be an overview of Kubernetes and some basic building blocks/concepts from a total beginner’s perspective. There are no prerequisites. Register yourself if you haven’t for the CTF Let’s hack the universe!.…Read More

I just finished solving HailStorm AWS cloud lab from Hack The Box. This lab is so Elegantly put together by Suresh Narvaneni. It starts off with an unprivileged external attacker trying to get a hold of a simulated enterprise environment. Which is heavily using AWS services for its infrastructure. We get a…Read More

The lab is something that anyone looking to test or improve their AD and general penetration skills should definitely try. Ben Rollin has done some extremely impressive work create it and i will push you approach it as a real pentest. It took me about 3-4 months juggling with work. I learnt…Read More

Passed the CRTP Exam owned Active directory network from the pentester academy.

Pikaboo was my first hard box on HTB with 3 layers of abstraction. First exploit path traversal to get in nginx to get access to a admin panel to exploit LFI inclusion in order to get code execution via log poisoning FTP. Exploit ldap injection to get user pwnmeow and…Read More

I got my first CVE in video-embed-box Subscriber level SQLI. CVE-2021-24337. It was a union based SQLI which is also time based exploitability  Disclosure link https://www.codevigilant.com/disclosure/2021/wp-plugin-video-embed-box/

My first machine Love was selected and released on hackthebox. it is an intentionally vulnerable windows machine with common windows vulnerabilities and common privilege escalation.

International Capture the flag competition from OWASP Seasides. I completed under top 10 with 6th rank spot MachineHacker we completed this CTF with the top 6th place there were 530 players among which we ranked 6th. there were 29 challenges from which we completed 28 of 29

Got 50% ownership on hack the box machines and got pro hacker rank on hack the box https://www.hackthebox.eu/profile/157669 check out my profile

Got featured in The Times Of India for speaking at lock picking village at BSides Ahmedabad 2019 spoke in front of 400 people talking about lock picking physical security and red teaming. presented and hosted a lock picking village for practical hands-on experience for attendees.

After a long time finally, I m the chapter lead for null Bhopal.

Helped people in contributing to opensource and made pull requests helped with understanding how open source works for hacktober fest 2019

This session will cover the open source pfsense. Will talk about – – Cover introduction to setting up firewall and – Blocking opening ports – Using an ids IPS on pfsense – Lock malicious sites – Setting up a VPN – Port knocking

Practice exercise of machine learnig after two other workshops on it orgnised for practise and problem solving .

Got Featured in Yalgar times, peoples Samachar Bhopal for organising events free coding workshops for javascript and python in Bhopal Madhya Pradesh.

Javascript Fundamentals and node js basics covered in this workshop helped people to get comfortable with javascript and good code writing practices in javascript.

Won 1st prize in sector 443 CTF yes the blue line in the chart is mine I scored around 1920 solving challenges of web. server exploitation, reversing and firmware reversing challenges.

Won another CTF in nullcon this was my second conference and the second ctf played in a conference. This was a blue team ctf we had to do malware analysis using checkpoint’s malware analysis and detection software made 1900 points and came first.

A detailed walkthrough of Basic Pentesting CTF. The goal is to develop an approach to Hacking with the help of CTF.

The session was based on solving Derp N Stink CTF and learning with it. The VM is available on vulnhub.