About

Anish Basnet

[email protected]
Kathmandu, Nepal

  I am a Offensive security researcher specializing in penetration testing of Network Infrastructures, Active Directory, web applications and APIs. I am currently working as bug-bounty hunter and I like to play CTFs in HackTheBox.

Technical Skills

• Penetration Testing: Web-Application and Network Services
• Operating System: GNU/Linux, Windows
• Networking: Network Security and Services
• Languages: Python, Bash, JavaScript, PowerShell
• Tools: Metasploit, Nmap, Burp Suite, NetExec, BloodHound, Impacket, Ligolo-ng, John the Ripper, Hashcat, Evil-WinRM

Certifications

• HTB Certified Penetration Testing Specialist Validation

• API Penetration Testing > API-Sec University

Projects

Web-Sacrifice (Intentional Vulnerable Web-application)

  It is intentional vulnerable web application i developed that features labs for vulnerabilities like XSS, CSRF, SQLi, NOSQLi and Broken Authentication Vulnerabilities. It is made using node. You can learn about Web Application penetration testing and information security knowledge using Web-sacrifice. It is distributed via dockerized container which makes it easier to use and learn.

You can get it from here: Web-Sacrifice