--- title: "Ridam Darji (@w1tn3sss) | Hashnode" description: "Breaking cloud. Building defense. Read the latest articles by Ridam Darji on Hashnode." url: "https://hashnode.com/@w1tn3sss" --- @w1tn3sss # Ridam Darji @w1tn3sss · Joined January 2026 Breaking cloud. Building defense ### [Case #03 — Secrets Leaked on GitHub: How Toyota Exposed 300,000 Customers for Five Years](https://theawsautopsy.hashnode.dev/case-03-secrets-leaked-on-github-how-toyota-exposed-300-000-customers-for-five-years?utm_source=hashnode&utm_medium=feed) Series: The AWS Autopsy — Real Cloud Breaches, Dissected Difficulty: Beginner-Intermediate Lab Time: ~25 minutes AWS Cost: Near zero (IAM + S3 only — free tier eligible) GitHub: AWS-Autopsy | Case #03 12 min read · [theawsautopsy.hashnode.dev](https://theawsautopsy.hashnode.dev/case-03-secrets-leaked-on-github-how-toyota-exposed-300-000-customers-for-five-years?utm_source=hashnode&utm_medium=feed) [May 21](https://hashnode.com/posts/case-03-secrets-leaked-on-github-how-toyota-exposed-300-000-customers-for-five-years/6a0e7ed18b03460221e06e7d) ### [The AWS Autopsy | Case #02 — IAM Privilege Escalation - Uber](https://theawsautopsy.hashnode.dev/the-aws-autopsy-case-02-iam-privilege-escalation-uber?utm_source=hashnode&utm_medium=feed) How One IAM Misconfiguration Gave an 18-Year-Old Full AWS Access at Uber Series: The AWS Autopsy — Real Cloud Breaches, Dissected Difficulty: Intermediate Lab Time: ~30 minutes AWS Cost: Near zero (IA 12 min read · [theawsautopsy.hashnode.dev](https://theawsautopsy.hashnode.dev/the-aws-autopsy-case-02-iam-privilege-escalation-uber?utm_source=hashnode&utm_medium=feed) [1](https://hashnode.com/posts/the-aws-autopsy-case-02-iam-privilege-escalation-uber/6a04ba82a0c1540277618a8e) [May 13](https://hashnode.com/posts/the-aws-autopsy-case-02-iam-privilege-escalation-uber/6a04ba82a0c1540277618a8e) ### [🔪 The AWS Autopsy | Case #01 — SSRF to IAM Credential Theft - Capital-One](https://theawsautopsy.hashnode.dev/the-aws-autopsy-case-01-ssrf-to-iam-credential-theft-capital-one?utm_source=hashnode&utm_medium=feed) Recreate the Capital One breach using SSRF and IMDSv1. Learn how IAM misconfigurations expose sensitive S3 data in real AWS labs. 10 min read · [theawsautopsy.hashnode.dev](https://theawsautopsy.hashnode.dev/the-aws-autopsy-case-01-ssrf-to-iam-credential-theft-capital-one?utm_source=hashnode&utm_medium=feed) [May 6](https://hashnode.com/posts/the-aws-autopsy-case-01-ssrf-to-iam-credential-theft-capital-one/69fb932850ecad4533691aa3)