Cybersecurity enthusiast from Kathmandu, Nepal, focused on web application security, bug bounty hunting, and responsible disclosure. Where there is curiosity, there is a way of learning.
I'm Nirmal Shrestha, a cybersecurity practitioner from Kathmandu, Nepal with a deep passion for web application security, vulnerability research, and bug bounty hunting.
My journey is driven by an insatiable curiosity — I believe that understanding how systems break is the first step to making them unbreakable. I specialise in identifying logic flaws, race conditions, and authentication bypasses that traditional scanners miss.
When I'm not hunting bugs, I write about my findings on Medium to share knowledge with the security community.
"Where there is Curiosity there is a way of learning — that's why I am a curious person."
What I focus on:
My research centres around web application vulnerabilities — particularly race conditions, response manipulation, and business logic flaws. I enjoy digging into how modern web applications handle concurrent requests and authentication flows.
I participate in CTF competitions to sharpen my offensive skills and stay current with emerging attack techniques. Every challenge is an opportunity to learn something new about how systems can be exploited — and subsequently hardened.
Currently: Actively participating in bug bounty programs on HackerOne and Bugcrowd while pursuing advanced certifications in penetration testing.
Whether you want to collaborate on a security project, discuss a finding, or just talk cybersecurity — I'm always open to a conversation.