Abusing Resource-Based Constrained Delegation (RBCD) in Active DirectoryActive Directory delegation is one of those features that makes complete sense on paper and causes constant headaches in practice. It solves a real problem. It's also misconfigured in almost every envJul 3, 2026·11 min read
4T$ CTF Writeup: Homelab ? More like Pwnlab !In this Capture The Flag (CTF) challenge, we were given access to two main targets: an SSH server running on a GoTTY shell and a NAS interface that allowed file uploads. My initial analysis revealed two key pieces of information. First, the SSH serve...Nov 11, 2024·2 min read
Messed up storage solutions for AWS EKSSo, this is the continuity story of me handling the CTF deployment for Pentester Nepal's 11th Anniversary. During the deployment, I provisioned the EKS cluster and added the addon for the EBS CSI driver as I had done similar previously too. I first s...Aug 4, 2024·3 min read
Proxying Minikube Kubernetes APIMinikube: Introduction Minikube is a lightweight Kubernetes implementation for quickly setting up a single-node Kubernetes cluster. We can deploy the cluster as a VM, or a container. This is only for educational purposes only and if you forget to set...Jan 3, 2024·3 min read
Network Security in AWS: VPC and Security Groups - Part INetwork security refers to the practice of protecting computer networks from unauthorized access, attack, or damage. It involves implementing various technologies, policies, and procedures to ensure the confidentiality, integrity, and availability of...Apr 6, 2023·7 min read
AWS IAM: Advantages, Common Misconfigurations and Best PracticesAWS IAM Identity and Access Management (IAM) is an AWS service that helps to provide access control to AWS resources. IAM should and is used to control authentication and authorization. AWS IAM can be used to can specify who and what can access servi...Jan 15, 2023·6 min read
Securing AWS Resources with VPC and CognitoAWS VPC Amazon Virtual Private Cloud (VPC) is a virtual network that can be used to create and manage networks in the cloud. It allows the launching of Amazon Elastic Compute Cloud (EC2) instances and other resources in a defined virtual network. A V...Jan 9, 2023·7 min read
