Abusing Resource-Based Constrained Delegation (RBCD) in Active Directory
Pradip Bhattarai
Command Palette
Search for a command to run...
Archive
25 posts published so far
Intigriti March 2026 XSS Challenge: Full Writeup
Pradip Bhattarai
Exploiting Integer Underflows in Solidity
Pradip Bhattarai
Exploiting Biased Off-Chain RNG in Ethereum Smart Contracts
Pradip Bhattarai
GoPhish Powers RSVP for Pentester Nepal’s 12th Anniversary
Pradip Bhattarai
Exploiting an LFI Vulnerability and Forging a Signature in BugcrowdCTF
Pradip Bhattarai
CTF Challenge Writeup: Manipulating an ERC4626 Vault
Pradip Bhattarai
Cyber Apocalypse CTF 2025: Exploiting Rounding Errors in HeliosDEX
Pradip Bhattarai
Understanding Access Control Issues in Web2 and Web3
Pradip Bhattarai
4T$ CTF Writeup: Homelab ? More like Pwnlab !
Pradip Bhattarai
4T$ CTF Writeup: KittyKittyBank
Pradip Bhattarai
Messed up storage solutions for AWS EKS
Pradip Bhattarai
Proxying Minikube Kubernetes API
Pradip Bhattarai
Network Security in AWS: VPC and Security Groups - Part I
Pradip Bhattarai
AWS IAM: Advantages, Common Misconfigurations and Best Practices
Pradip Bhattarai
Securing AWS Resources with VPC and Cognito
Pradip Bhattarai
Active Directory: Misconfigurations, Lab and Best Practices
Pradip Bhattarai
Understanding AWS Penetration Testing: AWS Security Part-II
Pradip Bhattarai
Understanding AWS Penetration Testing: AWS Security Part I
Pradip Bhattarai
Solving Assumptions of Life: Winja CTF | Nullcon Goa 2022
Pradip Bhattarai
Solving Crater Problem: Winja CTF | Nullcon Goa 2022
Pradip Bhattarai
Dirty Pipe: A Critical Linux Kernel Vulnerability
Pradip Bhattarai
BlockChain: Basics To Know About
Pradip Bhattarai
How To Use Nulled WordPress Themes Without Getting Hacked
Pradip Bhattarai
Injection: Facts to Know about SQLi
Pradip Bhattarai