Kailash Bohara

Security engineer with 9 years of experience in penetration testing, security architecture, cloud security, zero trust implementation, and threat hunting.

All Posts

2026

Container Security Hardening Guide and its Importance

Container security is no longer optional in cloud-native environments. As applications become increasingly containerized, securing images, workloads, and run...

2025

Hardcoded Credentials in an Android Application Leading to Unauthorized API Access and PII Exposure

When your API keys ship with the APK, every user is one decompile away from being an attacker.

2024

Website Source Code Analysis To AWS Account Takeover

Unveiling the risks of website source code analysis led to the discovery of AWS access/secret keys resulting in the takeover of an organization's AWS account.

2023

Cloudflare transform rules to get an A+ in the security header.

Getting A+ grade in securityheaders.com for a static website using Cloudflare transform rules.

Comprehensive Blog on the Exploitation and Prevention of AWS Route 53 Vulnerabilities

Exploring AWS Route 53 Vulnerabilities. Exploitation Techniques & Prevention Tips

Exploiting thousands of Domains for XSS

Exploiting goDaddy service to affect thousands of domains with cross-site scripting vulnerability.

2022

How I bypassed PHP functions to read sensitive files on server

Bypassing file read restriction on an application to achieve Remote Code Execution.

2021

MSSQL Injection In JSON Request

MSSQL Injection in android application from JSON Request.

Blind XSS on Google Internal System

Blind cross-site scripting (XSS) refers to a type of code injection where an attacker inserts XSS payload in user input fields and...