Network Analysis: Web Shell
Full packet capture triage of a compromised web server: isolating the web shell upload, tracing the attacker's follow-on commands, and rebuilding the timeline from raw PCAP.
Read Article →// whoami
Nabin Tiwari — Cybersecurity Blog
I'm a Computer Science student focused on network security and cybersecurity. This is where I publish walkthroughs and write-ups from CTF platforms, personal labs, and forensic investigations — documented the way I'd want to hand them to a teammate.
Articles & Walkthroughs
LetsDefend Challenge Writeup: HTTP Basic Auth
A detailed walkthrough of the LetsDefend HTTP Basic Auth challenge, explaining how HTTP Basic Authentication works, analyzing the authentication process, and identifying key security concepts and attack techniques.
Read Article →Enumeration & Brute Force Walkthrough
A practical penetration testing walkthrough demonstrating user enumeration, brute-force techniques, Burp Suite Intruder, HTTP Basic Authentication, Base64 decoding, and OSINT using the Wayback Machine to identify and exploit common web application weaknesses.
Read Article →Comprehensive Enterprise Penetration Test
A full-scope penetration test of a simulated enterprise network, covering reconnaissance, vulnerability assessment, exploitation, post-exploitation, web application testing, and security reporting. Successfully compromised a Windows 11 host and identified multiple OWASP Top 10 vulnerabilities in OWASP Juice Shop.
Read Article →BTLO: Log Analysis – Sysmon Writeup
A Blue Team investigation focused on Windows Sysmon logs to identify malicious activity, analyze process execution, detect persistence techniques, trace attacker behavior, and extract indicators of compromise (IOCs) using event log analysis.
Read Article →Web Investigation Writeup
A Blue Team network forensics investigation analyzing captured web traffic to uncover a web server compromise, identify SQL injection attempts, recover attacker credentials, detect uploaded malware, and reconstruct the complete attack timeline using Wireshark and NetworkMiner.
Read Article →About
I'm a Computer Science student specializing in Network Technology and Cybersecurity, currently working toward entry-level roles such as SOC Analyst, Cybersecurity Analyst, and Network Security Engineer — with a particular interest in international internship opportunities. This blog is where I document what I learn: methodology, dead ends, and the evidence behind each write-up, not just the final answer.