Nirmal Dahal - #Nittam 

Cybersecurity Consultant | 10+ Years’ Experience | Assess. Audit. Analyze. Advise. Ai.

[Nirmal Dahal - #Nittam  @TheNittam]

@nirajbhusal Congratulations @nirajbhusal 👏

[Nirmal Dahal - #Nittam  @TheNittam]

You can use the same testing approach to verify exposure to CVE-2025-55182 (CVSS 10.0 - Critical)
Ref: https://t.co/NrOEZgs7ss

Fixed in:
React: 19.0.1, 19.1.2, 19.2.1
Next.js: 15.0.5, 15.1.9, 15.2.6, 15.3.6, 15.4.8, 15.5.7, 15.6.0-canary.58, 16.0.7

[Nirmal Dahal - #Nittam  @TheNittam]

🚨 CVE-2025-29927 (9.1/10) 🚨
If your app uses Next.js Middleware for authentication, attackers can bypass it.

Check if your Next.js version is affected:
1️⃣ Right-click → Inspect
2️⃣ Open Console
3️⃣ Enter next.version

Affected Versions & Full Details:
https://t.co/uW3DEnKqVx

[PenTester Nepal🇳🇵 @pentesternepal]

Thank you Ullens College @Bugcrowd @AlteredSecurity @Hacker0x01 @apisecu NCA Nepal Rovix Cloud stickermandu🙏🇳🇵

A huge appreciation to all the amazing speakers, volunteers, & participants who made this event possible! 🎉
We look forward to organizing another event together soon!

[PenTester Nepal🇳🇵 @pentesternepal]

We are excited to announce that @Hacker0x01 will be our Community Partner for the 12th Anniversary Celebration Program! 🎉
Get ready for an exciting lineup of cybersecurity talks, CTF challenges, and networking sessions.
Thank you for your support!
#PTN #community #HackerOne

[PenTester Nepal🇳🇵 @pentesternepal]

We’re excited to announce that @Bugcrowd will be the Supporting Partner for Pentester Nepal’s event! 🎉

Get ready for a thrilling lineup of cybersecurity talks, CTF (Capture The Flag) challenges, and networking sessions.

Thank you for your support! #PTN #ItTakesACrowd

[Nirmal Dahal - #Nittam  @TheNittam]

Used Gemini Flash (free tier) + Python + AI browser agent to run a basic vuln assessment on DVWA locally.

No paid tools. No human clicks. Just AI following prompts.

It worked and this is just the beginning. If we can do this now with limitations, imagine what’s future holding.

[Nirmal Dahal - #Nittam  @TheNittam]

🚨 CVE-2025-29927 (9.1/10) 🚨
If your app uses Next.js Middleware for authentication, attackers can bypass it.

Check if your Next.js version is affected:
1️⃣ Right-click → Inspect
2️⃣ Open Console
3️⃣ Enter next.version

Affected Versions & Full Details:
https://t.co/uW3DEnKqVx

[Nirmal Dahal - #Nittam  @TheNittam]

@___0x00 RIP @___0x00 😓💔

[Nirmal Dahal - #Nittam  @TheNittam]

@dhunganabibek7 @PentesterLab @Jhaddix Ab Rulayega Kya? 🥹

[Nirmal Dahal - #Nittam  @TheNittam]

@bishal0x01 @n1r4jbhu54l 15 xutyo bhai 🤣

[Nirmal Dahal - #Nittam  @TheNittam]

@Bugcrowd @defcon @FlamingoVegas @flipper_net @imhaxormad @noneofyou007 get me some stickers and bags. 😝

[Nirmal Dahal - #Nittam  @TheNittam]

Regex mastery is key for Forensics, Red/Blue Teams, Dev roles. Try ReGen - inspired by @Burp_Suite's Grep and Extract feature, it simplifies Regex crafting. Create the desired Regex with ease.

Join to shape Regex simplicity in cybersecurity

https://t.co/cMbzb1yRbE

[Nirmal Dahal - #Nittam  @TheNittam]

@milannshrestga @_Sushantpradhan Thanks Brother @milannshrestga 😄

[Nirmal Dahal - #Nittam  @TheNittam]

@chunk27212 @aayushpok @bishal0x01 @cyberarmy101 @DailymotionUSA @dhakal__bibek @dhakal_ananda @GhimireVeshraj @imhaxormad @nb1b3k @Prakashpanta268 @RanjitAdhikar34 @saugatpk5 @rikeshbaniya Don't give up on education! Balancing both is possible. Professional certifications are a plus, but a BCA degree is also crucial for a strong foundation in software development & it will help boost your knowledge for Pentesting as well. Also, companies ask for a degree for a job.

[Nirmal Dahal - #Nittam  @TheNittam]

We at @CryptoGenNepal dug deep into the #trojan app named #NepaliGirl causing fear in Nepal cyberspace & found some concerning findings.

Big shoutout to @nirajkharel7 with whom I have always had a great collaboration experience.

Full Report: https://t.co/MQkGOAhZky

[CryptoGen Nepal @CryptoGenNepal]

@cryptogennepal is among #Top250MSSP by @msspalert

We are thrilled to share this with all of you and we have a continuous drive to focus on Cyber Security and be the Cyber Security Partner by Choice.

Full story: https://t.co/xfB0zaKSjn

#Made4Security #CyberSecurity #MSSP

[PenTester Nepal🇳🇵 @pentesternepal]

@51mr4n_ started her YT channel You can follow her channel for infosec and internet safety tips. Congrats 🎉and good wishes to her for creating useful contents! https://t.co/J7c5yEBMQd

[Nirmal Dahal - #Nittam  @TheNittam]

Back in June 2022, I found a flaw in the MEGA cloud storage system that let me store more data than they permit for free accounts. I was able to store roughly 1300GB data in MEGA, despite the fact that the free account storage restriction for MEGA is 20GB.
https://t.co/d9k7pnMgJn

[Nirmal Dahal - #Nittam  @TheNittam]

@ChaulagaiSachin Thank You for sharing 🤠