https://rav3nf0.github.io/ Recent content on Rav3nf0 Hugo -- gohugo.io en-us Mon, 01 Sep 2025 13:40:21 +0530 https://rav3nf0.github.io/posts/securecode/ Mon, 01 Sep 2025 13:40:21 +0530 https://rav3nf0.github.io/posts/securecode/ In web development, writing secure code isn’t just a “nice-to-have” – it’s absolutely critical. One tiny vulnerability can blow up in your face, exposing sensitive user data, trampling on privacy, and, let’s be real, absolutely trashing your reputation. I want to walk you through some of the most common web application vulnerabilities I see out there, share how we tackle them, and give you some pointers on what I zero in on during a good old-fashioned code review. https://rav3nf0.github.io/posts/dmsa_pt2/ Fri, 01 Aug 2025 13:40:21 +0530 https://rav3nf0.github.io/posts/dmsa_pt2/ With the dMSA trust model explained, let’s get into the part 2, on how attackers weaponize it. The vulnerability—dubbed BadSuccessor—abuses the migration logic behind dMSAs to create a forged link between any service account and a privileged user. No actual migration required. No permissions over the target needed. Just write access to an Organizational Unit and a little Active Directory knowledge. I’m going to break down how attackers create fake dMSAs, forge migration attributes, and abuse Kerberos PAC inheritance to escalate privileges—all while staying nearly invisible to traditional detection. https://rav3nf0.github.io/posts/dmsa_pt1/ Tue, 17 Jun 2025 12:47:16 +0530 https://rav3nf0.github.io/posts/dmsa_pt1/ Microsoft’s introduction of Delegated Managed Service Accounts (dMSAs) in Windows Server 2025 was supposed to improve security by replacing those messy legacy service accounts we’ve all been dealing with for years. But in late May 2025, security researchers found a devastating flaw in the dMSA implementation—they’re calling it “BadSuccessor”—and it can lead to complete domain takeover.This would be a 3 part blog with the first part digging into dMSA design and PAC flaw. https://rav3nf0.github.io/about/ Fri, 23 May 2025 14:53:45 +0530 https://rav3nf0.github.io/about/ I’m Aadarsh (aka Rav3nf0) — a security engineer, curious hacker, and builder at heart. I spend my days building secure, scalable systems… and my nights figuring out how to break them (ethically, of course 😈). 🔐 What I Do Red teaming, Application security, and secure code analysis Building internal tools for detection and prevention Tearing apart thick client apps to see what they’re really made of Writing & breaking scripts, sometimes at 3am Crafting CTFs and boot2root machines for learning 📌 Current Focus Exploring threat modeling, IAM misconfigs, and automation in Cloud Security and DevSecOps Leveling up in web app & infra security Weight training: chasing that 75kg goal 🏋️ Gotta REACH THE PEAK! https://rav3nf0.github.io/posts/gpoddity/ Wed, 21 May 2025 12:47:16 +0530 https://rav3nf0.github.io/posts/gpoddity/ Introduction Active Directory (AD) security continues to be a critical concern for organizations worldwide. Among the numerous attack vectors that threaten AD environments, GPOddity stands out as a particularly sophisticated technique that leverages Group Policy Objects (GPOs) and NTLM relaying to achieve privilege escalation. First documented by security researchers at Synacktiv, this attack can bypass many common security controls and lead to domain-wide compromise. In this technical deep dive, we’ll explore how GPOddity works, why it’s dangerous, and how security teams can defend against it. https://rav3nf0.github.io/posts/plat24/ Sun, 14 Apr 2024 12:47:16 +0530 https://rav3nf0.github.io/posts/plat24/ Prologue Hey there, This blog is not gonna be about the technical nitty-gritty and would be more on my experience and the challenges I faced. Buckle up for a tale of triumph, tribulation, and teamwork – all with a dash of Naruto sprinkled in (dattebayo!). This is the story of my 13-week HTB seasonal conquest! Yess, Naruto Fan here !! The Mission: Reach for the Holo! HTB uses a ranking system based on the percentage of flags captured during the season. https://rav3nf0.github.io/posts/gcc24/ Wed, 28 Feb 2024 12:47:16 +0530 https://rav3nf0.github.io/posts/gcc24/ Prologue Last week, I alongside with 3 other Indian Students, Sejal, anikait and Rajarshi represented India to participate in GCC 2024 at Thailand. We had an amazing experience representing our country at the Global Cybersecurity Camp (GCC) 2024 in Thailand. This blog isn’t about the technical nitty-gritty, but rather about the incredible memories and fun we had during that unforgettable week. A big shoutout to VueNow and Traboda for sponsoring this amazing trip!