Bhashit Pandya

Thoughts, stories, ideas, and infosec..

Step-by-Step Guide To Setup Raspberry Pi 5 with n8n, Docker, Postgresql and Cloudflare Tunnel For Penetration Testing

I’m sharing a detailed guide and process to configure a Raspberry Pi 5 to run n8n (an AI automation platform) using Docker, with PostgreSQL as the database and Cloudflared for secure external access. The setup is tailored for local use in an office environment, leveraging Raspberry Pi OS 5 (64-bit, Bookworm) for optimal performance. Since […]

A Real World Example Of Classic Remote Command Execution (RCE)

Recently, I was working on a pentesting engagement on one of the client’s complex applications having multiple components. This is a straightforward writeup on RCE.

Penetration Testing Firebase Web Applications

Sometime back, the team was working on an engagement with a firebase as the tech stack. Web, DB, analytics, and crash reports, were managed by google.