Nabin Dhungana

Cyber Security Researcher | Learner

[Nabin Dhungana @Nab1nDh]

@tryhackme 🥳

[Nabin Dhungana @Nab1nDh]

@Bibekipynb Great Bibek !
Keep Sharing

[Nabin Dhungana @Nab1nDh]

@tryhackme 🥳

[TryHackMe @tryhackme]

Cyber Security 101 (SEC1) certification is live! 🚀 a Hands-on certification built to show you actually understand the fundamentals. So stop saying you know the cyber fundamentals and start proving it.

And to launch it properly…🎁 We are giving away 500 FREE SEC1 certification attempts!

🔁 Share this post
📝 Fill in the form: https://t.co/uNaxplMD71
🏆 Get Certified

🖇️ Learn more about SEC1 here: https://t.co/hJYUyI4V9a

[Nabin Dhungana @Nab1nDh]

#LSPPDay60

Wrapped up the final day of #60DaysOfLearning2025!
It Boosted my skills in cybersecurity and its subdomains through consistent hands-on learning.

Today, revised "Web Application Hacker’s Toolkit"

Grateful for the journey with @lftechnology 🙌
#LearningWithLeapfrog

[Nabin Dhungana @Nab1nDh]

#LSPPDay59

Continued reading The Web Application Hacker’s Handbook
Today, I covered Mapping the Application, learned how to identify key content, enumerate functionality, and understand the full attack surface

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay58

Started reading The Web Application Hacker’s Handbook
Revised HTTP, web tech, encoding schemes, client/server functionality, and more.
Getting a solid grip on how the web actually works before diving deeper

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay57

Completed my Hall Booking Management System built with Java Swing GUI today!
Also finalized and documented the entire system to keep things clean and maintainable.

Here are some screenshots of the system
#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology
#Java

[Nabin Dhungana @Nab1nDh]

#LSPPDay56

Made good progress on a pending project today,
Partially completed a Hall Booking Management System using Java Swing GUI @intellijidea and created its documentation.
One step closer to wrapping it up!

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology #Java

[Nabin Dhungana @Nab1nDh]

#LSPPDay55

Wrapped up API Testing today,
Then dove into CSRF (Cross-Site Request Forgery) vulnerabilities on @PortSwigger
Explored how attackers can trick authenticated users into performing unintended action.

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay54

Revised key web hacking topics today. Access Control, File Uploads vulnerabilities, Race Conditions, and API Testing. Tightening the basics before diving deeper.

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay53

Dived into API Testing on @PortSwigger today. Explored API recon, endpoint discovery, hidden parameters, and mass assignment vulnerabilities. It’s wild how a single parameter can flip access control!

#60DaysOfLearning2025 #LearningWithLeapfrog
@lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay52

Wrapped up File Upload Vulnerabilities with the Content-Type restriction bypass lab.
Then jumped into Race Conditions, explored timing-based logic flaws, and completed the Limit overrun lab on @PortSwigger.

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay51

Practiced File Upload Vulnerabilities on @PortSwigger today. Learned how attackers bypass validation to upload web shells and gain RCE. Pretty sure PortSwigger is happy to see me breaking things safely.😉

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay50

Wrapped up Broken Access Control labs from @PortSwigger today. Gained clarity on access control vulnerabilities across user roles and learned how insecure endpoints can expose sensitive functions.

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay49

Continued exploring Broken Access Control on @PortSwigger.
Worked on new labs covering forced browsing, IDOR, and access control vulnerabilities in multi-user environments.

#60DaysOfLearning2025 #LearningWithLeapfrog
@lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay48

Started Web App Pentesting today.
Explored Broken Access Control labs on @PortSwigger practiced unprotected admin function and privilege escalation scenarios.

#60DaysOfLearning2025 #LearningWithLeapfrog
@lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay47

Completed full documentation of the HackPark machine from @TryHackMe.
Practiced Windows enumeration and privilege escalation, focusing on techniques like service misconfigurations and credential hunting

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology

[Nabin Dhungana @Nab1nDh]

#LSPPDay46

Explored data visualization and regression analysis Plotted relationships, added trend lines, and analyzed patterns in the data using ggplot2. Learning how to turn raw numbers into insights through visuals
#60DaysOfLearning2025 #LearningWithLeapfrog
@lftechnology #R

[Nabin Dhungana @Nab1nDh]

#LSPPDay45

Continued with the HackPark machine on @TryHackMe
Explored Windows enumeration further and tried various privilege escalation vectors.
Learning new ways attackers can gain SYSTEM

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology #WindowsPrivilegeEscalation

[Nabin Dhungana @Nab1nDh]

#LSPPDay44

Wrapped up the scream machine from @VulnHub and jumped into HackPark on @TryHackMe for more Windows exploitation practice.

Successfully bruteforced valid credentials now &diving into exploitation

#60DaysOfLearning2025 #LearningWithLeapfrog @lftechnology #Pentesting