Abusing Resource-Based Constrained Delegation (RBCD) in Active DirectoryActive Directory delegation is one of those features that makes complete sense on paper and causes constant headaches in practice. It solves a real problem. It's also misconfigured in almost every envJul 3, 2026·11 min read
Messed up storage solutions for AWS EKSSo, this is the continuity story of me handling the CTF deployment for Pentester Nepal's 11th Anniversary. During the deployment, I provisioned the EKS cluster and added the addon for the EBS CSI driver as I had done similar previously too. I first s...Aug 4, 2024·3 min read
Proxying Minikube Kubernetes APIMinikube: Introduction Minikube is a lightweight Kubernetes implementation for quickly setting up a single-node Kubernetes cluster. We can deploy the cluster as a VM, or a container. This is only for educational purposes only and if you forget to set...Jan 3, 2024·3 min read
Network Security in AWS: VPC and Security Groups - Part INetwork security refers to the practice of protecting computer networks from unauthorized access, attack, or damage. It involves implementing various technologies, policies, and procedures to ensure the confidentiality, integrity, and availability of...Apr 6, 2023·7 min read
AWS IAM: Advantages, Common Misconfigurations and Best PracticesAWS IAM Identity and Access Management (IAM) is an AWS service that helps to provide access control to AWS resources. IAM should and is used to control authentication and authorization. AWS IAM can be used to can specify who and what can access servi...Jan 15, 2023·6 min read
Securing AWS Resources with VPC and CognitoAWS VPC Amazon Virtual Private Cloud (VPC) is a virtual network that can be used to create and manage networks in the cloud. It allows the launching of Amazon Elastic Compute Cloud (EC2) instances and other resources in a defined virtual network. A V...Jan 9, 2023·7 min read
Active Directory: Misconfigurations, Lab and Best PracticesActive Directory Active Directory is a directory service used by organizations to store information about their users, computers, and other network resources. It's used primarily to provide a secure way to manage users, applications, and network reso...Dec 26, 2022·11 min read
