Community
Giving back to the field.
Leadership
Pentester Nepal · 2017 to present
Community leader
Leads a cybersecurity community of more than 6,000 members, and organises its meetups and anniversary events.
PyCon JP 2026 · 2026
Organising team
Joined the organising team for PyCon JP 2026, two years after speaking at PyCon JP 2024 in Tokyo.
OWASP Kathmandu chapter · 2021 to 2024
Volunteer community leader
Organised application security events and talks, including an Introduction to Hardware Hacking session at Meetup 0x05 (October 2023).
Open source and research
GitHub
ReGen, an open-source regex generator
Builds regex patterns from values selected in logs or text, for forensics, attack, defence and validation work.
Question2Answer · 2021
CVE-2021-3258
Found, reported and documented a stored XSS in a Q2A plugin, fixed by the maintainer before details were published.
Exploit-DB · 2018
Google Hacking Database entry
GHDB-ID 4997, a query defenders can use to find their own exposed environment files.
CryptoGen Nepal · 2022 to 2023
Public malware analysis
Published the Nepali Girl trojan analysis and briefed national tech media so the public could recognise and avoid it.
Blog
Write-ups and disclosures
Step-by-step write-ups of vulnerabilities found and reported, from eBay and MEGA to samy.pl.
Teaching and training
Softwarica College of IT & E-commerce · 2022 to present
Part-time lecturer
Teaches practical penetration testing, web security, red team management and cybersecurity career development.
National Cybersecurity Center · 2025
Lead trainer, National Cyber Drill
Four days of hands-on training for engineers, officers and directors from about 30 government agencies.
Plus 36 talks, trainings and panels delivered. See every session
Let's scope it together.
Tell me what you need to protect and by when. I'll reply with whether I can help and how I'd approach it.