Breaking down security, technical challenges, and code.https://realnits.github.io/https://realnits.github.io/posts/reversing-gemini-cli-pre-sandbox-rce/https://realnits.github.io/posts/reversing-gemini-cli-pre-sandbox-rce/A CVE dropped against Gemini CLI with a 10.0 score and a two-line advisory that explained nothing. So I cloned the repo, read the patch backwards, and reconstructed how a .env file in a pull request turns into code execution on your CI runner — before the sandbox ever starts.Fri, 24 Jul 2026 00:00:00 GMThttps://realnits.github.io/posts/nodejs-sharedarraybuffer-toctou-memory-corruption/https://realnits.github.io/posts/nodejs-sharedarraybuffer-toctou-memory-corruption/How I found a TOCTOU race condition in Node.js's native UTF-8 decoder that causes heap corruption via SharedArrayBuffer, built a working crash PoC, reported it to HackerOne — and watched it get closed as Informative.Sun, 24 May 2026 00:00:00 GMThttps://realnits.github.io/posts/yeswehack-dojo49-secret-manager/https://realnits.github.io/posts/yeswehack-dojo49-secret-manager/A detailed walkthrough of how I solved YesWeHack's Dojo #49 Secret Manager challenge by chaining two glob injection tricks — a recursive copy flag and a grep option terminator — to exfiltrate secrets from a protected directory in a single HTTP requestMon, 23 Mar 2026 15:22:00 GMThttps://realnits.github.io/posts/fixing-false-positives-dalfox/https://realnits.github.io/posts/fixing-false-positives-dalfox/A deep dive into contributing to Dalfox — fixing false positive XSS alerts on JSON API endpoints, the mistakes I made, and the proper fix.Sat, 14 Mar 2026 00:00:00 GMThttps://realnits.github.io/posts/access-secrets-via-s3-bucket-versioning/https://realnits.github.io/posts/access-secrets-via-s3-bucket-versioning/In this lab, we will be solving an lab with an attack vector through a s3 bucket versioning feature and through that we can able to exfil the secrets and elevating further moreWed, 05 Mar 2025 15:22:00 GMThttps://realnits.github.io/posts/loot-public-ebs-snapshots/https://realnits.github.io/posts/loot-public-ebs-snapshots/In this lab, we will be solving an lab on understanding what ebs snapshots are and there misconfigurations....Wed, 05 Mar 2025 15:22:00 GMThttps://realnits.github.io/posts/leverage-leaked-credentials-for-pwnage/https://realnits.github.io/posts/leverage-leaked-credentials-for-pwnage/Finding leaked AWS access keys in a GitHub .env file, using them to enumerate the account, and pivoting into Amazon RDS to escalate and capture the flagSun, 02 Mar 2025 15:22:00 GMThttps://realnits.github.io/posts/plunder-rds-snapshots/https://realnits.github.io/posts/plunder-rds-snapshots/Enumerating publicly exposed Amazon RDS snapshots from just an AWS account ID, restoring one into my own account, and dumping the database to recover the flagSun, 02 Mar 2025 15:22:00 GMThttps://realnits.github.io/posts/identify-aws-accid-from-public-s3/https://realnits.github.io/posts/identify-aws-accid-from-public-s3/Getting to know about how we can able to fecth a AWS account ID from a publicly available s3 bucketMon, 24 Feb 2025 15:22:00 GMThttps://realnits.github.io/posts/uncover-secrets-codecommit/https://realnits.github.io/posts/uncover-secrets-codecommit/In this lab, we will see how the leaked credentials through dockerhub can be leveraged atmost and more furtherFri, 31 Jan 2025 10:22:00 GMThttps://realnits.github.io/posts/reveal-hidden-risks-securityhub/https://realnits.github.io/posts/reveal-hidden-risks-securityhub/Walkthrough of exploring AWS securityhub and a simulation activity to identify an issue that lead to some interesting findingsWed, 08 Jan 2025 11:22:00 GMThttps://realnits.github.io/posts/intigriti-may-2024-xss-challenge/https://realnits.github.io/posts/intigriti-may-2024-xss-challenge/A detailed walkthrough of how I solved Intigriti's May 2024 XSS challenge by exploiting a 2nd-order formula injection vulnerability in PhpSpreadsheet's calculateFormula() to achieve Cross-Site ScriptingSat, 15 Jun 2024 15:22:00 GMThttps://realnits.github.io/posts/hacking-porn-and-dating-sites-a-theme-based-bugbounty-hunting/https://realnits.github.io/posts/hacking-porn-and-dating-sites-a-theme-based-bugbounty-hunting/An Individual research on bugbounty programs that I took an unique approach on choosing porn industry based programs which paid me pretty much..Fri, 07 Jun 2024 15:22:00 GMThttps://realnits.github.io/posts/intigriti-april-2024-xss-challenge/https://realnits.github.io/posts/intigriti-april-2024-xss-challenge/A walkthrough of how I solved Intigriti's April 2024 monthly XSS challenge — hardcoded creds in the DOM, an iframe sandbox misconfiguration, and a postMessage handler with no origin check that turned into a clean XSSWed, 01 May 2024 10:00:00 GMThttps://realnits.github.io/posts/breach-in-the-cloud/https://realnits.github.io/posts/breach-in-the-cloud/This is a challenge from pwnedlabs where I've been provided with the cloudtrial logs and from there I've to do log analysis and trying to reproduce the attack from the attacker perspectiveFri, 09 Feb 2024 15:22:00 GMThttps://realnits.github.io/posts/ssrf-to-pwned/https://realnits.github.io/posts/ssrf-to-pwned/Lab from pwnedlabs where we have provided with a webserver and we are gonna look into how we can leverage it to SSRFFri, 09 Feb 2024 15:22:00 GMThttps://realnits.github.io/posts/big-iam-challenge/https://realnits.github.io/posts/big-iam-challenge/IAM Challenge from Wiz where we will be given an IAM rules and need to identify misconfiguration and exploit it to get a flagThu, 08 Jun 2023 15:22:00 GMThttps://realnits.github.io/posts/dirsearch-to-20k-bounty/https://realnits.github.io/posts/dirsearch-to-20k-bounty/My First Bug in my bugbounty journey where I took an approach of guy who solves the CTF... Unfortunately it worked and I found some sensitive files which lead to a bountyWed, 06 Oct 2021 15:22:00 GMT