Profile banner
Saransh Rana

Saransh Rana

Staff Security Engineer — Cloud security leader at CRED

saransh-rana
Bengaluru, Karnataka, India
Joined January 2026
Favicon imagesaransh-rana.gitbook.io
Favicon imagex.com
Favicon imagelinkedin.com

Network

608 connections

Summary

Practicing cloud security engineer who publishes hands‑on research about cloud attack paths and detection gaps. gitbook+2
Combines offensive (red team/bug bounty) experience with infrastructure security to find and demonstrate real-world misconfigurations and exfiltration techniques. rocketreach+1
Builds and publishes tooling and integrations for security automation and analysis (MCP server work), enabling conversational/automated inspection of AWS environments. github+1
Active community member and speaker: shares findings publicly (blog posts, newsletters) and instructs at community events focused on cloud/offensive security. cloud-village+2

Work

Education

Projects

Writing

A Fresh Perspective on Exfiltrating ECS Task Metadata Credentials

January 1, 2024

Explains how an attacker with access to an EC2 host running ECS tasks can discover and exfiltrate IAM credentials for task roles (via /proc and container metadata), and offers automation/script approaches for harvesting credentials.

Favicon imagesaransh-rana.gitbook.io

Bypass CloudTrail Detection using AWS AppStream

September 1, 2023

Details a potential detection-bypass scenario involving AWS AppStream where AppStream usage could be leveraged to avoid CloudTrail-based detection for users of AppStream fleets.

Favicon imagesaransh-rana.gitbook.io

Maintaining persistence via Shared sessions on Cloud Workstations

September 1, 2023

Describes methods for maintaining persistence and impersonating other users who have logged in via gcloud CLI on Google Cloud Workstations.

Favicon imagesaransh-rana.gitbook.io