I'm Kiran Ghimire, a cyber security analyst and penetration tester from Nepal with 3+ years of hands-on experience across web, API, network, container and Active Directory testing.

I hold the OSCP, OSCP+, CRTP and PJPT certifications, have published CVE-2021-22557, CVE-2023-0227 and CVE-2023-0434, and I'm listed on the Google Vulnerability Reward Program Hall of Fame.

These days I'm building cveplayground.com, a hands-on platform for learning real-world CVEs, and keydecryptor.com, a free browser-based security toolkit. I've also released vulnerable machines such as Sau, Soccer and PC on HackTheBox, TryHackMe and VulnHub.

This blog is where I write up labs, challenges and techniques. Have a look around.