Helping organizations in securing digital assets by providing professional penetration testing services | Director | Penetration Testing Consultant
Gujarat, India
Joined June 2013
- Tweets1K
- Following983
- Followers342
- Likes97
Nirav Patel retweeted
CVE-2022-36804: Bitbucket Server was vulnerable with Remote Code Execution (RCE)
Docker Lab and Proof of Concept (PoC) python script can be found at github.com/walnutsecurity/cv…
Blog: walnutsecurity.com/cve-2022-…
Nirav Patel retweeted
Finally...!!
It's always a great feeling to accomplished a long term goal.
Super excited to posting this as I have successfully delivered my first Blackhat training in Blackhat USA 2022.
"Attacking Injection Flaws Masterclass - Virtual" x2 batches
bit.ly/3JO40iP
Nirav Patel retweeted
We are continuing our efforts in virtual environment!
OWASP Pune Meet - 02 July,22
Topic: How to keep your dependencies secure & up-to-date
Speaker: Pramod Rana (@IAmVarchashva)
Time: 11 AM - 11:50 AM
meetup.com/owasp-pune-chapte…
Google Meet: lnkd.in/d2RSqDzN
cc:@JenyRaval
Nirav Patel retweeted
Docker-OSX - Run Mac in a Docker container hakin9.org/docker-osx-run-ma…
#infosec #cybersecurity #redteam #pentest #pentesting #hacking #hackers #coding #opensource #Linux #windows #DFIR #docker #iOS #macOS https://teapawt.net/t.co/vAkdnqoV3Q Hakin9
Nirav Patel retweeted
We are continuing our efforts in new normal! It’s virtual again!
OWASP Pune Meetup: 8-Jan-22
Topic: The criticality of managing an application security program
Speaker: Ankit Giri (@aankitgiri)
Time: 11-11:50 AM
meet.google.com/sve-yuqs-ipo
@IAmVarchashva @JenyRaval @nirav4peace
Nirav Patel retweeted
Identifying and Exploiting Path Traversal or Remote Code Execution in Apache 2.4.49 and 2.4.50. For manual and automated approaches for exploitation, kindly visit below link
walnutsecurity.com/path-trav…
@nirav4peace
Nirav Patel retweeted
We have created a vulnerable docker lab for CVE-2021-41773 and a PoC python script to test Path Traversal and Remote Code Execution vulnerability in Apache 2.4.49.
github.com/orgs/walnutsecuri…
I hope this is helpful. Do share your suggestions.
@nirav4peace
Nirav Patel retweeted
Hello everyone, we are starting our owasp meet at 11am. Please join the meeting from below link:
meet.google.com/apt-cxui-zyc
cc: @nirav4peace @IAmVarchashva @JenyRaval @owasp
Nirav Patel retweeted
We are continuing our efforts in new normal environment! It’s virtual again!
OWASP Pune Meetup - 19th June, 2021
Topic: Attacking GraphQL APIs
Speaker: Ali Jujara (@alijujara7)
Time: 11 AM - 11:50 AM
(Virtual) Location:
meet.google.com/apt-cxui-zyc
Meetup: meetup.com/OWASP-Pune-Chapte…
Nirav Patel retweeted
We had a wonderful session by @sw4pn1lp on "Use of Linux commands for security testing". Thanks everyone for joining and we will be uploading the presentation in official @OWASP_PUNE website soon.
#OWASPPune #Meetup #OWASP #VirtualSession
cc: @nirav4peace @JenyRaval
We are back again with meet-up, new normal this time! Its virtual! @OWASP_PUNE Meetup - 20 Feb, 2021
"Use of Linux commands and utilities in security testing" by @sw4pn1lp
Join meet.google.com/wcv-onwm-arb & Fill docs.google.com/forms/d/e/1F…
@JenyRaval @nirav4peace
Nirav Patel retweeted
We are back again with meet-up, new normal this time! Its virtual! @OWASP_PUNE Meetup - 20 Feb, 2021
"Use of Linux commands and utilities in security testing" by @sw4pn1lp
Join meet.google.com/wcv-onwm-arb & Fill docs.google.com/forms/d/e/1F…
@JenyRaval @nirav4peace
We are back again with meet-up, new normal this time! Its virtual! @OWASP_PUNE Meetup - 20 Feb, 2021
"Use of Linux commands and utilities in security testing" by @sw4pn1lp
Join meet.google.com/wcv-onwm-arb & Fill docs.google.com/forms/d/e/1F…
@JenyRaval @nirav4peace
Nirav Patel retweeted
Detailed writeup about padding oracle
medium.com/@sanjay.gondaliya…
Nirav Patel retweeted
Want to virtualize ARM-based firmware? Here is one of the custom way to achieve it.
Part-1: payatu.com/blog/mihir/virtua…
Part-2: payatu.com/blog/mihir/virtua…
cc: @payatulabs
#IoTSecurity #Firmware #Virtualizing
Nirav Patel retweeted
When the application has custom protections @realsanjay gets to build a custom extension in burp. nice writeup @notsosecure on managing application with per request HMAC protection
This Post is from an account that no longer exists. Learn more
Nirav Patel retweeted
If you are stuck in a pentest and unable to run an automated/burp scans because of an integrity check at client side. Checkout this awesome blog by @realsanjay .
New #notsosecure blog.
notsosecure.com/automating-p…
Nirav Patel retweeted
Out of band techniques #nullcon2020 by @notsosecure folks @AshwinPathak26 @tricksiused uncommon ways of exfilterating blind injection vulnerabilities.
