Prologue It was the end of Nullcon 2020. The physical edition of Winja CTF 2020 competition had just ended. We had only women participants back then. Was it too early to start planning for the next CTF? Not if you have your heart and soul into it. After a few exchange…

Introduction To promote the upcoming Winja CTF 2021 competition which is to be held during Nullcon 2021, Winja released the 1st online quiz challenge as part of its promotional events. Participants were expected to understand the regular expressions and choose the most appropriate answer. This blog post is an attempt to…

Whenever I use AWS services, my biggest concern after I am done using the services has always been — Did I destroy all the resources properly, or, is there anything still left behind? This was one of the main reasons why I got attracted towards Terraform. Terraform allows us to…

When someone asks me to do something, my natural tendency is generally to say “no”. Maybe, because I buy time to think through things and explore my own feelings. Always used to saying what I feel, I mostly end up in conflicting situations. It isn’t for no reason that I…

I work as Security Analyst at Appsecco doing application security testing and pentesting mostly Prelude When I looked at the target application for the first time, it looked like any other web application. But, what looked like a single web application, initially, turned out to be a conglomerate of multiple web…

Introduction Recently, I completed the development of a vulnerable hybrid Android application called as VyAPI which contains the first set of (vulnerable) features that I feel would cover the basics (and a little more) for anyone interested in practising Android pen-testing. Let me tell you that this is my first ever…

Exactly 1 year, 4 months and 5 days ago, I joined the application security company known as Appsecco. The first few months at my workplace had went by in learning just the basics, in knowing my people, and in understanding the company culture. …

According to Wikipedia, Identity and access management (IAM) is, in computer security, the security and business discipline that enables the right individuals to access the right resources at the right times and for the right reasons We, the individuals, are accessing resources all over the Internet and Intranet, day-in and…

“Practice makes a man (and also women) perfect.” — This is something that we are all aware of at a conscious (or unconscious) level. However, practice would never be complete if we aren’t patient enough. As part of our training at Appsecco, I was trying to understand and exploit security…