Skip to content
View sahiloj's full-sized avatar
🤖
Focusing
🤖
Focusing
17 followers · 5 following

Achievements

Achievement: StarstruckAchievement: YOLOAchievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: Pull Shark

Achievements

Achievement: StarstruckAchievement: YOLOAchievement: Pair ExtraordinaireAchievement: QuickdrawAchievement: Pull Shark

Highlights

  • Pro

Block or report sahiloj

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
sahiloj/README.md

Hi 👋, I'm Sahil Ojha

A passionate Offensive Security Researcher and Application Penetration Tester.

Coding

  • 🔭 I’m currently working on Application, Network Infrastructures and Cloud Security

  • 📝 I sometime write blogs on https://sahilojha.com.np

  • 📜 Go through my 18 published CVEs

  • 💬 Ask me about Cybersecurity, Penetration Testing, Red Teaming, Security Solutions Engineering, AI Automations and Bug Bounty Hunting.

  • ⚡ Fun fact 🏍 Moto Ride

Connect with me:

Tech Stacks and Tools:

Pinned Loading

  1. MCPScan MCPScan Public

    Offensive MCP server auditor: detects tool poisoning, credential leaks, RCE vectors, SSRF, session hijacking, and supply chain vulnerabilities across stdio, HTTP, and SSE transports.

    TypeScript 24 7

  2. CVE-2023-31702 CVE-2023-31702 Public

    CVE-2023-31702 is an authenticated SQL Injection vulnerability discovered in MicroWorld Technologies eScan Management Console version 14.0.1400.2281.

    2 1

  3. CVE-2025-5352 CVE-2025-5352 Public

    A stored XSS vulnerability exists in the Analytics component of lunary-ai/lunary where NEXT_PUBLIC_CUSTOM_SCRIPT is injected into the DOM using dangerouslySetInnerHTML without sanitization. An atta…

  4. CVE-2023-34839 CVE-2023-34839 Public

    CVE-2023-34839 is a Cross-Site Request Forgery (CSRF) vulnerability discovered in Issabel PBX version 4.0.0-6, a widely used open-source Unified Communications platform.

    HTML 5 3