Nirmal Dahal boasts an extensive tenure in the cybersecurity industry, where he has consistently fortified numerous enterprises against a spectrum of cyber threats. His expertise and accomplishments have earned him substantial acclaim, notably securing a place on the EC-Council’s prestigious “Global Ethical Hacking Leaderboard” in April 2021, Quarter 2, ranking among the top 10 ethical hackers worldwide for that period. Nirmal Dahal’s contributions to the field have been widely recognized, with features in various prominent magazines and national newspapers highlighting his impactful role. Additionally, in Quarter 1 of 2017, he was honored among the top 25 hackers on Europe’s pioneering BugBounty Platform, YESWEHACK, further underscoring his prowess and influence in cybersecurity.
Nirmal Dahal
November 17, 2022
MEGA's Unlimited Cloud Storage Vulnerability
Background Back in June 2022, I found a flaw in the MEGA cloud storage system that let me store more data than they permit for free accounts.
Read More July 12, 2022
leveraging the SQL Injection to Execute the XSS by Evading CSP
Although it sounds silly, I am dumb enough to do this.
Read More June 19, 2019
XSS on Samy Pl
In this article, I am going to explain a security issue that I found on a web site which is famous within the information security researchers.
Read More August 21, 2017
CVE-2021-3258 | S-XSS to Defacement & Account Takeover [Q2A Themes]
In this article, I am going to share a POC (Proof of Concept) on a vulnerability that I found on a popular Forum Management System by Q2A.
Read More November 22, 2016
Facebook SVG Locky Ransomware Analysis
This Is What Actually Facebook’s SVG Malware Is Doing. We Had Used W3School’s IDE While Analyzing The Malicious SVG File.
Read More September 11, 2016
ByPassing EBay XSS Protection
Hi there, today I want to share small proof of concept regarding “Reflective Cross-Site Scripting [ R-XSS ]” which I had found on eBay back in 2016.
Read More