corpus.blog
41554 blogs · [ { "id": "01a08735-3745-736f-95b2-c15ade137d41", "title": "Never Trust Your AI Agent's Own Sandbox", "url": "https://badshah.io/blog/never-trust-your-ai-agents-sandbox/", "published_at": "2026-08-11T18:30:00+00:00" }, { "id": "01a08735-3745-736f-95b2-c15ade28b46e", "title": "The Hunt for an Open Source AI Workflow Tool", "url": "https://badshah.io/blog/hunt-for-open-source-ai-workflow-tool/", "published_at": "2026-08-01T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac1ff518dc", "title": "AI Is the Best Thing to Happen to Security", "url": "https://badshah.io/blog/ai-is-the-best-thing-to-happen-to-security/", "published_at": "2026-06-27T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac20a4b0d2", "title": "Let Attendees Say No to Conference Swag", "url": "https://badshah.io/blog/let-attendees-say-no-to-conference-swag/", "published_at": "2026-03-05T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2192fd53", "title": "How 'What Can Go Wrong?' Went Wrong", "url": "https://badshah.io/blog/what-can-go-wrong-went-wrong/", "published_at": "2025-12-09T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2196e298", "title": "Securing a SaaS Company's AWS Environment After a Breach", "url": "https://badshah.io/case-studies/saas-aws-breach/", "published_at": "2025-04-14T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2252bdac", "title": "The Key Factor Behind TablePlus's DDoS Resiliency", "url": "https://badshah.io/blog/key-factor-behind-tableplus-ddos-resiliency/", "published_at": "2024-04-22T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac23062b13", "title": "Ultimate Guide to Fail at Least Privilege in Cloud (and the Hard Lessons I Learned)", "url": "https://badshah.io/blog/ultimate-guide-to-fail-at-least-privilege-cloud/", "published_at": "2024-02-25T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac23652231", "title": "Kickstarting in Cybersecurity: Strategic Advice for 2nd and 3rd Year Indian College Students", "url": "https://badshah.io/blog/kickstarting-in-cybersecurity-for-indian-students/", "published_at": "2024-01-22T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac23bc0e4a", "title": "Beyond the Basics: AWS WAF's Lesser-Known Limitations", "url": "https://badshah.io/blog/aws-waf-lesser-known-limitations-revealed/", "published_at": "2023-09-12T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac23c53714", "title": "My Key Takeaways from AWS re:Inforce 2023", "url": "https://badshah.io/blog/aws-reinforce-2023/", "published_at": "2023-06-26T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2468aa59", "title": "The Risk You Can't Afford to Ignore: AWS SES and Email Spoofing", "url": "https://badshah.io/blog/aws-ses-and-email-spoofing/", "published_at": "2023-05-10T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac250ccdd9", "title": "My Love/Hate Relationship with Cloud Custodian", "url": "https://badshah.io/blog/my-love-hate-relationship-with-cloud-custodian/", "published_at": "2023-04-09T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac257f7b0a", "title": "One important feature that Dependabot is missing", "url": "https://badshah.io/blog/important-dependabot-feature/", "published_at": "2022-12-10T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac260375ca", "title": "Did you completely remove secrets from git repository? Really?", "url": "https://badshah.io/blog/remove-secrets-from-git-repo/", "published_at": "2022-10-06T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2634eedb", "title": "GuardDuty - the Good, the Bad and the Ugly", "url": "https://badshah.io/blog/guardduty-good-bad-ugly/", "published_at": "2022-08-13T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2658af7e", "title": "What should you use - CloudQuery or Steampipe?", "url": "https://badshah.io/blog/cloudquery-vs-steampipe/", "published_at": "2022-07-28T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac270c3d89", "title": "Things I wish I knew about AWS WAF - Bot Control", "url": "https://badshah.io/blog/things-i-wish-i-knew-aws-waf-bot-control/", "published_at": "2022-07-10T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2758f4a0", "title": "Vulnerable API writeup", "url": "https://badshah.io/writeup/vulnerable-api/", "published_at": "2020-07-09T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac27dae7b7", "title": "How to remove DNS record takeover bug class ?", "url": "https://badshah.io/blog/remove-domain-takeover-bug-class/", "published_at": "2020-06-05T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac28568a65", "title": "Adding Gitleaks to Gitlab CI Pipeline", "url": "https://badshah.io/experiment/adding-gitleaks-to-gitlab-pipeline/", "published_at": "2020-03-21T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac29124873", "title": "Creating a Cloud Function to publish messages to Pub/Sub", "url": "https://badshah.io/experiment/cloud-function-to-pub-sub/", "published_at": "2020-02-22T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac29d11fc7", "title": "Fast Reverse DNS Lookups using FDNS and MongoDB", "url": "https://badshah.io/experiment/fast-reverse-dns-lookups-using-fdns-and-mongodb/", "published_at": "2020-02-16T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac29fe27b9", "title": "Faster nmap scanning with the help of GNU parallel", "url": "https://badshah.io/experiment/faster-nmap-scanning-with-the-help-of-gnu-parallel/", "published_at": "2020-02-16T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2a29ca3f", "title": "Finding Route53 logs with the help of CloudTrail and Athena", "url": "https://badshah.io/blog/finding-route53-logs-with-the-help-of-cloudtrail-and-athena/", "published_at": "2019-11-26T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2b21f3df", "title": "Backup and restore ElasticSearch data using GCS", "url": "https://badshah.io/blog/backup-and-restore-elasticsearch-cluster-using-gcs/", "published_at": "2019-09-11T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2b7de802", "title": "How I hosted a DNS server on AWS ?", "url": "https://badshah.io/blog/how-i-hosted-a-dns-server-on-aws/", "published_at": "2019-06-06T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2c42e2d7", "title": "Efficient way to pentest Android Chat Applications", "url": "https://badshah.io/blog/efficient-way-to-pentest-android-chat-applications/", "published_at": "2019-03-31T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2c4dd7bb", "title": "Managing Linux Users & SSH keys using Ansible", "url": "https://badshah.io/blog/managing-linux-users-ssh-keys-using-ansible/", "published_at": "2018-10-22T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2d2a9858", "title": "Bucket Policy for your Public S3 Bucket", "url": "https://badshah.io/blog/bucket-policy-for-your-public-s3-bucket/", "published_at": "2018-08-02T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2d95c68d", "title": "Talks", "url": "https://badshah.io/talks/", "published_at": "2018-02-28T18:30:00+00:00" }, { "id": "01a08735-3746-708d-b81a-82ac2de784cc", "title": "Explore", "url": "https://badshah.io/portfolio/explore/", "published_at": null }, { "id": "01a08735-3746-708d-b81a-82ac2ea743de", "title": "Freebies", "url": "https://badshah.io/freebies/", "published_at": null }, { "id": "01a08735-3746-708d-b81a-82ac2f2122b4", "title": "Gooir", "url": "https://badshah.io/portfolio/gooir/", "published_at": null }, { "id": "01a08735-3746-708d-b81a-82ac301d13ce", "title": "Kana", "url": "https://badshah.io/portfolio/kana/", "published_at": null }, { "id": "01a08735-3746-708d-b81a-82ac30e6e051", "title": "Mozar", "url": "https://badshah.io/portfolio/mozar/", "published_at": null }, { "id": "01a08735-3746-708d-b81a-82ac313517da", "title": "Stay Fit", "url": "https://badshah.io/portfolio/stay-fit/", "published_at": null }, { "id": "01a08735-3746-708d-b81a-82ac3155e7bf", "title": "Trainings", "url": "https://badshah.io/trainings/", "published_at": null }, { "id": "01a08735-3746-708d-b81a-82ac31b5c836", "title": "Zorro", "url": "https://badshah.io/portfolio/zorro/", "published_at": null } ] posts Claim your blog
Back to bnchandrapal
Blog · corpus.blog/blogs/badshah.io/posts

bnchandrapal

badshah.io

2026

Never Trust Your AI Agent's Own Sandboxoriginal ↗
11 Aug 2026
The Hunt for an Open Source AI Workflow Tooloriginal ↗
1 Aug 2026
AI Is the Best Thing to Happen to Securityoriginal ↗
27 Jun 2026
Let Attendees Say No to Conference Swagoriginal ↗
5 Mar 2026

2025

How 'What Can Go Wrong?' Went Wrongoriginal ↗
9 Dec 2025
Securing a SaaS Company's AWS Environment After a Breachoriginal ↗
14 Apr 2025

2024

The Key Factor Behind TablePlus's DDoS Resiliencyoriginal ↗
22 Apr 2024
Ultimate Guide to Fail at Least Privilege in Cloud (and the Hard Lessons I Learned)original ↗
25 Feb 2024
Kickstarting in Cybersecurity: Strategic Advice for 2nd and 3rd Year Indian College Studentsoriginal ↗
22 Jan 2024

2023

Beyond the Basics: AWS WAF's Lesser-Known Limitationsoriginal ↗
12 Sept 2023
My Key Takeaways from AWS re:Inforce 2023original ↗
26 Jun 2023
The Risk You Can't Afford to Ignore: AWS SES and Email Spoofingoriginal ↗
10 May 2023
My Love/Hate Relationship with Cloud Custodianoriginal ↗
9 Apr 2023

2022

One important feature that Dependabot is missingoriginal ↗
10 Dec 2022
Did you completely remove secrets from git repository? Really?original ↗
6 Oct 2022
GuardDuty - the Good, the Bad and the Uglyoriginal ↗
13 Aug 2022
What should you use - CloudQuery or Steampipe?original ↗
28 Jul 2022
Things I wish I knew about AWS WAF - Bot Controloriginal ↗
10 Jul 2022

2020

Vulnerable API writeuporiginal ↗
9 Jul 2020
How to remove DNS record takeover bug class ?original ↗
5 Jun 2020
Adding Gitleaks to Gitlab CI Pipelineoriginal ↗
21 Mar 2020
Creating a Cloud Function to publish messages to Pub/Suboriginal ↗
22 Feb 2020
Fast Reverse DNS Lookups using FDNS and MongoDBoriginal ↗
16 Feb 2020
Faster nmap scanning with the help of GNU paralleloriginal ↗
16 Feb 2020

2019

Finding Route53 logs with the help of CloudTrail and Athenaoriginal ↗
26 Nov 2019
Backup and restore ElasticSearch data using GCSoriginal ↗
11 Sept 2019
How I hosted a DNS server on AWS ?original ↗
6 Jun 2019
Efficient way to pentest Android Chat Applicationsoriginal ↗
31 Mar 2019

2018

Managing Linux Users & SSH keys using Ansibleoriginal ↗
22 Oct 2018
Bucket Policy for your Public S3 Bucketoriginal ↗
2 Aug 2018
Talksoriginal ↗
28 Feb 2018

Undated

Exploreoriginal ↗
—
Freebiesoriginal ↗
—
Gooiroriginal ↗
—
Kanaoriginal ↗
—
Mozaroriginal ↗
—
Stay Fitoriginal ↗
—
Trainingsoriginal ↗
—
Zorrooriginal ↗
—