Shashank | CredShields

@cyberboyIndia

Co-Founder @credshields | Building solidityscan.com Ex Security Analyst @Hacker0x01 Leading scs.owasp.org (Smart Contract Security Standards)

INDIA

credshields.com

Replies Reposts Media Articles

Pinned
Shashank | CredShields
@cyberboyIndia
Jan 23, 2025
Our team at @SolidityScan contributed to the @owasp top 10 for smart contract security. owasp.org/www-project-sm… As per the 2024 data on hacks the top 10 are as below SC01:2025 - Access Control Vulnerabilities SC02:2025 - Price Oracle Manipulation SC03:2025 - Logic Errors
2
Shashank | CredShields
@cyberboyIndia
Sep 1
I am in Singapore this week meeting clients and partners. If you are around and working on anything in security or just want to talk shop about pentesting, AI in security testing, or where the space is heading, I would be happy to meet. It is always more useful to have these
Shashank | CredShields
@cyberboyIndia
Jul 27
When you automate vulnerability detection with rules, you run into a wall that is hard to see at first, which is that a rule only knows the shapes you have already told it about. You write detectors for the patterns you have seen, and they work, until a developer implements the
1
Shashank | CredShields
@cyberboyIndia
May 25
The difference between a pentest finding and an exploit chain? Finding a misconfigured S3 bucket is table stakes. Chaining it is the actual work: → Exposed S3 bucket contains app config with internal endpoints hardcoded → Internal endpoint has an SSRF vulnerability → SSRF
Shashank | CredShields
@cyberboyIndia
May 20
If you work with modern frontend stacks, data visualization, or AI tools, please read this immediately and double check your dependency trees. Over the last 48 hours, a massive escalation in the ongoing "Mini Shai-Hulud" worm campaign hit the npm ecosystem hard. Yesterday, an