Oops!

Information security | VAPT | OWASP Kathmandu Chapter Leader

[mpz @tnirmalz]

@owasp_kathmandu Huge thanks to the @owasp_kathmandu (@Corrupted_brain and the team) for providing me the oppurtunity to share my findings and thoughts with the community. It was a pleasure connecting with everyone there. Looking forward to more such events in the future!

[PenTester Nepal🇳🇵 @pentesternepal]

Thank you Ullens College @Bugcrowd @AlteredSecurity @Hacker0x01 @apisecu NCA Nepal Rovix Cloud stickermandu🙏🇳🇵

A huge appreciation to all the amazing speakers, volunteers, & participants who made this event possible! 🎉
We look forward to organizing another event together soon!

[Ananda Dhakal @dhakal_ananda]

Had a really great time talking at @Steel_Con

Giving talks, meeting people, playing games and stuffs. Fun times!

[mpz @tnirmalz]

Slides from our (w/@bishal0x01 ) talk at @owasp_kathmandu "Breaching The Perimeter - Our Most Impactful Bug Bounty Findings" is now up. Shout out to the OWASP KTM organizers @smaranchand @Corrupted_brain for another grand event!! 🔥🔥

#BugBounty #owasp

https://t.co/qg2OyaHGsO

[Oops! @Corrupted_brain]

@dhakal_ananda You and the team did a great job. Congrats

[Oops! @Corrupted_brain]

Hack entire datasets rather than playing with prompts.

[Truffle Security @trufflesec]

We scanned 400TB of DeepSeek’s training data & found:

🚨 ~12K live API keys & passwords
🌐 2.76M affected pages
🔄 One key appeared 57K+ times
🔑 219 secret types (AWS root keys, Slack webhooks, etc.)
🔗 Full research: https://t.co/Y6mUIpY9PB

[Oops! @Corrupted_brain]

@SahilOj C99 in 2024 makes me nostalgic.

[Oops! @Corrupted_brain]

@NepalPressnp WTF १-२ जनाको मृत्यु हुन्छ?

[Oops! @Corrupted_brain]

@Online_khabar Olitics in university.

[Oops! @Corrupted_brain]

Security is about keeping risk at a manageable level. You should continuously focus on managing the risks and put controls in place.

[Oops! @Corrupted_brain]

@Online_khabar गरे पछि बोल

[Oops! @Corrupted_brain]

@Online_khabar WTF 😒

[Oops! @Corrupted_brain]

@ananayarora It's no more falcon.

[Oops! @Corrupted_brain]

Path traversal*

[Oops! @Corrupted_brain]

Found SolarWinds serv-u vulnerability CVE-2024-28995 using following endpoints to execute LFI. #solarwinds #Pentesting

https://t.co/lunoUKfYwV
https://t.co/oJp05c0UTG

[Oops! @Corrupted_brain]

@SumanaShrestha Would be great if those excel files containing school data be presented on dynamic searchable tables right in the webpage.

[Oops! @Corrupted_brain]

For friends in Nepal and India.
💥 Call for Paper/Presentation/Tools at OWASP Kathmandu.
#owasp #infosec #cybersecurity #nepal

[Oops! @Corrupted_brain]

@Online_khabar Useless clowns

[Oops! @Corrupted_brain]

@SahilOj @regmicmahesh +1

[Oops! @Corrupted_brain]

@ADITYASHENDE17 AWS secret key exposure.