Placed 49th out of 3,634 teams in the Spring 2026 Team Game, scoring 2,960 of 3,000 points with 99% of challenges completed.
"}},{"node":{"frontmatter":{"title":"Duke University Responsible Disclosure","tech":["Duke University","SQL Injection"],"github":null,"external":"https://security.duke.edu/news/duke-recognizes-responsible-disclosure-69/"},"html":"Found a critical Union-based SQL Injection Vulnerability in one of the online assets of Duke University.
"}},{"node":{"frontmatter":{"title":"HackerOne Ambassador World Cup","tech":["HackerOne","3rd Globally","Nepal"],"github":"","external":"https://www.hackerone.com/ambassador-world-cup"},"html":"Placed 3rd globally in the 2023 Ambassador World Cup, representing Nepal.
"}},{"node":{"frontmatter":{"title":"Drexel University Bug Bounty","tech":["Drexel University","SSRF"],"github":"","external":"https://drive.google.com/file/d/1du2H22lSkGIjkfu6FVPsHEzCeHgFHR3J/view?usp=sharing"},"html":"Identified and reported a SSRF vulnerability leading to Local File Read in Drexel University's online asset and received a Letter of Recognition
"}},{"node":{"frontmatter":{"title":"U.S. Department of Health & Human Services VDP","tech":["HHS","XSS"],"github":"","external":"https://www.hhs.gov/vulnerability-disclosure-policy/acknowledgments/index.html"},"html":"Got listed in U.S. Department of Health & Human Services Acknowledgments page for reporting a security vulnerability.
"}},{"node":{"frontmatter":{"title":"Microsoft Security Hall-Of-Fame","tech":["Microsoft","MSRC HOF"],"github":"","external":"https://msrc.microsoft.com/update-guide/acknowledgement/online"},"html":"Made it to MSRC Hall-Of-Fame, October 2022, by reporting a vulnerability in Microsoft's online asset.
"}},{"node":{"frontmatter":{"title":"Top 3% in TryHackMe","tech":["TryHackMe","Top 3%"],"github":"","external":"https://tryhackme.com/p/.nb1b3k"},"html":"I am among Top 3% users in TryHackMe. Checkout my TryHackMe Profile
"}},{"node":{"frontmatter":{"title":"YesWeHack Top 50","tech":["YesWeHack","Global","HOF"],"github":"","external":"https://yeswehack.com/hunters/nb1b3k"},"html":"Ranked in the global top 50 on YesWeHack after 450+ valid findings across 300+ programs.
"}},{"node":{"frontmatter":{"title":"Lazada Hall-Of-Fame","tech":["Stored XSS","IDOR","BAC"],"github":"","external":"https://yeswehack.com/programs/lazada"},"html":"Listed in Hall-Of-Fame of Lazada and also got rewarded nice for finding a security vulnerability.
"}},{"node":{"frontmatter":{"title":"Alibaba Hall-Of-Fame","tech":["Alibaba HOF","Stored XSS","OAuth Misconfig"],"github":null,"external":"https://security.alibaba.com/top.htm?tab=1"},"html":"Found multiple security vulnerabilities like Stored XSS, OAuth Misconfigurations, and IDOR in Alibaba.
"}},{"node":{"frontmatter":{"title":"Bugv Leaderboard #3","tech":["Bugv","Leaderboard"],"github":"","external":"https://app.bugv.io/researcher/leaderboard"},"html":"Currently ranked #3 on Bugv Leaderboard. Bugv is a Vulnerability Coordination and Bug Bounty platform which is made in Nepal.
"}},{"node":{"frontmatter":{"title":"Bytecare Technology","tech":["Information Disclosure"],"github":"","external":"https://drive.google.com/file/d/1cyKp-X4RQHAIpXlBB_SRqa5YErmBxHdt/view?usp=sharing"},"html":"Reported information disclosure vulnerability to Bytecare Technology and got a Certificate of Appreciation.
"}},{"node":{"frontmatter":{"title":"Daraz Bug Bounty","tech":["OAuth Misconfig","Account Takeover","Stored XSS"],"github":null,"external":"https://www.daraz.com.np/"},"html":"Found and reported multiple vulnerabilities to Daraz, Nepal's largest online shopping platform.
"}},{"node":{"frontmatter":{"title":"Dutch Government","tech":["Dutch Government","XSS","IDOR"],"github":null,"external":"#"},"html":"\"I hacked the Dutch Government and all I got was this lousy T-Shirt.\" Yes, I hacked the Dutch Government and got a lousy T-Shirt.
"}},{"node":{"frontmatter":{"title":"Ekbana Solutions & QuikrFood","tech":["Account Takeover","2FA Bypass"],"github":null,"external":"https://quikrfood.com/"},"html":"I found a critical Account Takeover vulnerability in QuikrFood, a online food delivery website created by Ekbana Solutions, and got rewarded for it.
"}},{"node":{"frontmatter":{"title":"SastoDeal","tech":["SQL Injection","Gitlab Access","Auth Bypass"],"github":"","external":"https://sastodeal.com/"},"html":"I found and reported multiple critical security vulnerabilities to SastoDeal, Nepal's ecommerce platform, and got rewarded for it.
"}},{"node":{"frontmatter":{"title":"CVE-2022-0540 on VZVZ.nl","tech":["CVE-2022-0540","Auth Bypass"],"github":null,"external":"https://www.vzvz.nl/report-vulnerability"},"html":"Found and reported CVE-2022-0540 in one of the subdomains of VZVZ.nl and got a T-Shirt as a Swag.
"}}]}}}