About
I am a cybersecurity visionary committed to strengthening digital ecosystems against evolving threats. With over a decade of experience, I serve as Co-Founder and CTO of CryptoGen Nepal, where my team and I provide cutting-edge services and solutions in Offensive Security, Defensive Security and Governance, Risk, and Compliance (GRC). Our pioneering work has been recognized with prestigious accolades, including the ICT Startup Award and being listed among the Top 250 MISSPs worldwide, solidifying our role in shaping Nepal's cybersecurity landscape.
Work Experience
Languages
Skills
Recent Media Coverages
I have been invited to speak on various topics related to cybersecurity and here are some of my recent notable appearances.
Python Powered "Cyber Security" - Tools, Techniques, Exploitation and Automation | PyCon JP 2024
Python has always been recognized as a language for web development, automation, analysis, and AI/ML. However, it has been crucial for cybersecurity experts as well. In my talk, I highlighted how Python is used in cybersecurity and the various areas where it plays a significant role.
Episode 148: Cyber Security, World of Hacking, Cyber Safety - Sushant Pradhan Podcast
I was invited to the Sushant Pradhan podcast, where we discussed cybersecurity topics such as sidechannel vulnerabilities, IoT security, user awareness, zero-click attacks, MITM attacks, AI in cybersecurity, blockchain, scam calls, bug bounty hunting, and cyber safety practices for individuals and businesses.
राहदानी प्रणालीमा 'र्यान्समवेअर' आक्रमण 'शंकास्पद' - SAROKAR
The Department of Passport (Nepal) was compromised and scams and hacking were on the rise. To raise awareness, we were invited to Kantipur TV for the show called "Sarokar" where I, Bijay Limbu (VAIRAV Tech) and SP Deepak Awosti (Cyber Bureau) had an insightful session. I believe it had a significant impact on viewers.
खतरनाक 'नेपाली गर्ल'को सर्च अपरेसन - TechPana
Nepali Girl was an Android trojan spreading in Nepal via WhatsApp. It stole sensitive information from victims' devices, compromising their privacy and security. Believed to have stolen crores from bank accounts, the Cyber Bureau made arrests. We analyzed the trojan and shared our findings on a leading tech portal "TechPana".
Notable Hacktivities
I find it fascinating to research and develop new things and engage in other cybersecurity activities. Here are some of my notable hacktivities.
- F
First International Conference as a Speaker - PyCon JP 2024
Japan
I have always believed and still do that Python is one of the most suitable languages for cybersecurity as it is used everywhere from exploit development to automation. Since people generally don’t think about this aspect much, I always wanted to highlight its importance. Finally, I got the opportunity to do so at PyCon JP 2024 and I express my gratitude to PyCon JP for this oppurtunity. - T
Top 10 Ethical Hacker in The World by EC-Council
Worldwide
I was listed among the top 10 ethical hackers in the world by EC-Council, a renowned organization known for its prestigious certifications like Certified Ethical Hacker (CEH). This recognition was awarded in the second quarter of April 2021 by EC-Council itself. - M
My first CVE was officially assigned "CVE-2021-3258"
Worldwide
Question2Answer.org is the developer of Q2A, a platform similar to WordPress but specifically designed for Question and Answer forums like Stack Overflow. In 2017, I discovered a stored XSS vulnerability that could lead to account takeover. The issue was promptly fixed by the development team. However, considering its global usage, I obtained a CVE for this vulnerability in 2021, marking my first CVE assignment. - F
Finding XSS on Samy Kamkar's Site
Worldwide
Samy Kamkar, a legendary figure in the world of security, has crafted his website in a way that makes it nearly impossible to even view the code, let alone find an XSS vulnerability. Yet, I managed to uncover one on his site, which felt like a huge achievement. Samy is a master in many areas of security, and finding a vulnerability on his site is something I will always cherish. He is the mastermind behind the MySpace XSS worm, the world’s fastest-spreading JavaScript-based worm. The fact that I was able to find the same vulnerability on a legend’s site and contribute to securing it makes this discovery feel like a milestone in my own journey. - T
Top 25 in YESWEHACK Platform
Worldwide
It was the first quarter of 2017 when one of Europe's earliest bug bounty platforms, BugBounty Factory (now called YesWeHack) had recently launched. I spent a significant amount of time on the platform and ranked among the Top 25 bug bounty hunters. - 1
1st Runner Up in HackBack CTF 2017
Nepal, Kathmandu University
HackBack, held as part of Kathmandu University's annual IT Meet in 2017 and organized by Rigo Technology, featured Nepal's first on-site CTF competition. I secured 1st Runner-Up in this prestigious event.
That Define Me
I am passionate about continuous learning and earning certifications to stay ahead in my field. Among the 15+ professional certifications I have achieved, here are some of my recent and notable ones.
- I
ISO/IEC 27001:2022 - Lead Auditor
International Organization for Standardization
- D
DevSecOps - Introduction
AppSecEngineer
- C
Certified Ethical Hacker - Master
EC-Council
- C
Certified Ethical Hacker - Practical
EC-Council
- C
Certified Payment Card Industry Security Implementer
SISA Infosec
- C
Certified Ethical Hacker - ANSI
EC-Council