Bhuwan Bhetwal

@ya3raj

Pentester

Kathmandu, NepalJoined November 2024

About

Hi, I’m a Penetration Tester. My job is to intentionally make applications do things they’re not supposed to—finding flaws and exploiting them to ensure they’re secure. I specialize in Web, API, Android, and iOS security.

Available for

I am available for part-time or contract penetration testing roles, cybersecurity consultations, vulnerability assessments, and freelance security research projects

Bhuwan Bhetwal's blogs

Bhuwan Bhetwal's HandBookblog.bhuwanbhetwal.com.np7 posts

Articles Threads Comments

Recently published

blog.bhuwanbhetwal.com.np

Mobile Application Penetration Testing Setup In Linux

Download Genymotion with virtual box: https://www.genymotion.com/product-desktop/download/ Installing Genymotion1. You can see something like “genymotion-3.X.X-linux_x64.bin” in your Downloads directory.2. Open your terminal and navigate to your Down...

Dec 25, 20248 min read

blog.bhuwanbhetwal.com.np

Connecting android/emulator to your Burp suite via OpenVPN

This is a simple blog for connecting the Genymotion and the Burpsuite for Android Pentesing using OpenVPN. I use Genymotion (Google Pixel 3 — Android Version 9) and Kali Linux Let’s start the configuration. Make sure you save this two scripts. Githu...

Nov 16, 20242 min read

blog.bhuwanbhetwal.com.np

CSRF + POST Body Param Reflection = POST-Based XSS (A BrainFuck)

Hello again, This blog explains how i chained a CSRF and XSS on a POST request. So, lets get straight into it. One day i was hunting on a private program and i could see most of hacker’s were reporting CSRF. Almost 5 reports out of 10 were them. Lo...

Nov 8, 20244 min read

blog.bhuwanbhetwal.com.np

Breaking In: How RXSS and SQLi Can Lead to Full Account Takeover and Database Access

These vulnerabilities were Identified on one of the YesWeHack’s Private Program. I was hunting late night when i received an invitation from one of the Private Program. As they Were Interested on critical reports. I was looking for SQLi, Command Exec...

Nov 7, 20243 min read

blog.bhuwanbhetwal.com.np

Get your python 3.11.9 back on Linux

First of all, Select the required python version (Example: 3.11.9) https://www.python.org/ftp/python/3.11.9/ Now, Install all the required dependencies to compile and install Python 3.11.9 sudo apt install build-essential zlib1g-dev libncurses5-dev l...

Nov 7, 20241 min read

Bhuwan Bhetwal

About

Available for

Bhuwan Bhetwal's blogs

Recently published

Mobile Application Penetration Testing Setup In Linux

Connecting android/emulator to your Burp suite via OpenVPN

CSRF + POST Body Param Reflection = POST-Based XSS (A BrainFuck)

Breaking In: How RXSS and SQLi Can Lead to Full Account Takeover and Database Access

Get your python 3.11.9 back on Linux

Search Hashnode

Bhuwan Bhetwal

About

Available for

Bhuwan Bhetwal's blogs

Recently published

Mobile Application Penetration Testing Setup In Linux

Connecting android/emulator to your Burp suite via OpenVPN

CSRF + POST Body Param Reflection = POST-Based XSS (A BrainFuck)

Breaking In: How RXSS and SQLi Can Lead to Full Account Takeover and Database Access

Get your python 3.11.9 back on Linux