---
title: "Uday Bhale (@rudraub) | Hashnode"
description: "Cybersecurity | VAPT | Web Application Security | Ethical Hacking. Read the latest articles by Uday Bhale on Hashnode."
url: "https://hashnode.com/@rudraub"
---

@rudraub

# Uday Bhale

@rudraub · Pune, India · Joined July 2026

Cybersecurity | VAPT | Web Application Security | Ethical Hacking

[Website](https://udaybhale-portfolio.lovable.app/)

### [Hack The Box: Dancing](https://hackwithrudraub.hashnode.dev/hack-the-box-dancing?utm_source=hashnode&utm_medium=feed)

Machine Overview Machine: Dancing Platform: Hack The Box Difficulty: Easy Focus: SMB Enumeration and File Share Access Objective The goal of this machine is to identify exposed services, discover avai

5 min read · [hackwithrudraub.hashnode.dev](https://hackwithrudraub.hashnode.dev/hack-the-box-dancing?utm_source=hashnode&utm_medium=feed)

[Sep 6](https://hashnode.com/posts/hack-the-box-dancing/6a9df69160bd13074df2637c)

### [RecruiteX Project – Web Application Penetration Testing Written Short Notes](https://hackwithrudraub.hashnode.dev/recruitex-project-web-application-penetration-testing-written-short-notes?utm_source=hashnode&utm_medium=feed)

Explore the RecruiteX web application penetration test, covering reconnaissance, API testing, IDOR, password reset, file upload, and RCE.

4 min read · [hackwithrudraub.hashnode.dev](https://hackwithrudraub.hashnode.dev/recruitex-project-web-application-penetration-testing-written-short-notes?utm_source=hashnode&utm_medium=feed)

[Aug 25](https://hashnode.com/posts/recruitex-project-web-application-penetration-testing-written-short-notes/6a8de9a9a54ba33b7be4c5ff)

### [Part 3: From Admin Panel to Remote Code Execution](https://hackwithrudraub.hashnode.dev/part-3-admin-panel-to-rce?utm_source=hashnode&utm_medium=feed)

Follow a web pentest attack chain from admin panel access and file upload bypass to RCE, web shell, reverse shell, and server compromise.

7 min read · [hackwithrudraub.hashnode.dev](https://hackwithrudraub.hashnode.dev/part-3-admin-panel-to-rce?utm_source=hashnode&utm_medium=feed)

[Aug 17](https://hashnode.com/posts/part-3-admin-panel-to-rce/6a8336abc94bcc122d4a3d4f)

### [Weak Password Reset Mechanism: From IDOR to Admin Access](https://hackwithrudraub.hashnode.dev/weak-password-reset-to-admin-access?utm_source=hashnode&utm_medium=feed)

Learn how IDOR, exposed reset tokens, weak token generation, and missing rate limits can lead to administrator account takeover.

5 min read · [hackwithrudraub.hashnode.dev](https://hackwithrudraub.hashnode.dev/weak-password-reset-to-admin-access?utm_source=hashnode&utm_medium=feed)

[Aug 16](https://hashnode.com/posts/weak-password-reset-to-admin-access/6a81a35ebbca56a06d72a70a)

### [RecruiteX : Web Security Assessment Part 1 | Recon to IDOR Guided Pentest: Web (Part 1)](https://hackwithrudraub.hashnode.dev/recruitex-web-sec-assessment-part1?utm_source=hashnode&utm_medium=feed)

Learn web pentesting from Nmap reconnaissance to LAMP fingerprinting, Gobuster enumeration, API discovery, and IDOR in Part 1.

5 min read · [hackwithrudraub.hashnode.dev](https://hackwithrudraub.hashnode.dev/recruitex-web-sec-assessment-part1?utm_source=hashnode&utm_medium=feed)

[Aug 2](https://hashnode.com/posts/recruitex-web-sec-assessment-part1/6a6f5b4141cb1abb56011267)