---
title: "Sajan Ghimire (@SajanGhimire) | Hashnode"
description: "> Exploring web vulnerabilities - Breaking things (ethically)🙂. Read the latest articles by Sajan Ghimire on Hashnode."
url: "https://hashnode.com/@SajanGhimire"
---

@SajanGhimire

# Sajan Ghimire

@SajanGhimire · Nepal · Joined September 2024

\> Exploring web vulnerabilities - Breaking things (ethically)🙂

### [2FA broken logic](https://sajanghimire.hashnode.dev/2fa-broken-logic?utm_source=hashnode&utm_medium=feed)

his lab's two-factor authentication is vulnerable due to its flawed logic

4 min read · [sajanghimire.hashnode.dev](https://sajanghimire.hashnode.dev/2fa-broken-logic?utm_source=hashnode&utm_medium=feed)

[Mar 21, 2025](https://hashnode.com/posts/2fa-broken-logic/67dd07a0556dbf331890b563)

### [Exploiting Business Logic: Bypassing Client-Side Controls to Manipulate Pricing](https://sajanghimire.hashnode.dev/exploiting-business-logic-bypassing-client-side-controls-to-manipulate-pricing?utm_source=hashnode&utm_medium=feed)

Understanding how excessive trust in client-side validation can lead to business logic vulnerabilities and financial exploitation.

3 min read · [sajanghimire.hashnode.dev](https://sajanghimire.hashnode.dev/exploiting-business-logic-bypassing-client-side-controls-to-manipulate-pricing?utm_source=hashnode&utm_medium=feed)

[Mar 20, 2025](https://hashnode.com/posts/exploiting-business-logic-bypassing-client-side-controls-to-manipulate-pricing/67dbd3656211879dc7f64514)