Raj Chowdhury | Offensive Security Engineer & Cloud IAM Architect

~/blog$

Blog

Security research, writeups, and thoughts

A deep dive into discovering a critical SSRF vulnerability that allowed access to internal AWS metadata and led to a full cloud account compromise.

Common AWS IAM misconfigurations I've seen in production environments and how attackers exploit them for privilege escalation and data exfiltration.

A comprehensive guide to Active Directory red teaming techniques, from initial foothold to domain dominance, based on real-world engagements.

Lessons learned, study strategies, and exam tips from my OSCP+ certification journey — everything I wish I knew before starting.