Light

drewgallis Goto Github PK

followers: 11.0 following: 6.0 repos: 23.0 gists: 0.0

Name: Drew Gallis

Type: User

Company: @Affirm

Bio: RIT Computing Security Alum - Security Engineer working with K8s containers, elastic, security analytics, computer forensics, cloud auditing, and automation.

Location: Pittsburgh, PA

Blog: https://drew.gallis.xyz/

About Me

Hey everyone I'm Drew, I currently work in the financial sector as a Senior Security Operations Engineer at one of the leading financial technology BNPL (Buy Now Pay Later) organizations. Throughout my professional security career, I have currently worked in Application Security, Platform Security, Security Operations, Enterprise Security, and Vulnerability Analysis. I primarily work with a mesh of service APIs, hybrid-cloud environments, securing containerized enviroments (docker/kubernetes), security automation workflows, vulnerability analysis, and am a long-time python fanatic.

In my free time, I like to experiment in my home lab's enterprise network with various hacking hardware (Wireless/RF/LAN), cutting-edge SIEMs, custom monitoring, and security automation solutions. Outside of security, I enjoy home-brewing, fly fishing, backcountry skiing, and hiking.

I’m currently working on k8s, python security automation scripts, and bots
📫 How to reach me: @drewgallis

Drew Gallis's Projects

cloud-auditing-framework-gcp

Building a custom auditing framework through Docker utilizing google cloud services[GKS], kubernetes management service[Rancher], and an auditing tool[Security Monkey]

csec380-p1

Principles of Web App Security Open Source Project (Video Upload Web App)

docker-electron

work in progress

drewgallis

dvia-v2

Damn Vulnerable iOS App (DVIA) is an iOS application that is damn vulnerable. Its main goal is to provide a platform to mobile security enthusiasts/professionals or students to test their iOS penetration testing skills in a legal environment. This project is developed and maintained by @prateekg147. The vulnerabilities and solutions covered in this app are tested up to iOS 11. The current version is writen in Swift and has the following vulnerabilities.

dvna

Damn Vulnerable NodeJS Application

dvwa

Damn Vulnerable Web Application (DVWA)

git-vulnerability-fix

Instructions to fix the 2018 Git Vulnerability (git clone --recursive)

graduation

$ git remote <graduation> yearbook

igoat

OWASP iGoat - A Learning Tool for iOS App Pentesting and Security by Swaroop Yermalkar

labyrinthium

Three Dimensional Randomly Generated Maze Game Implemented In Python

merge-duplicate-symbols

Sketch plugin to merge symbols and layer&text styles.

node-multiple-rooms-chat

node socket.io multiple room chat demo

openvas-docker

A Docker container for Openvas

payloadsallthethings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

security-onion

Security Onion 16.04 - Linux distro for threat hunting, enterprise security monitoring, and log management

security_monkey

Security Monkey

star-wars

star wars parser in python (tweet bot in progress)

typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

vscode-nim

An extension for VS Code which provides support for the Nim language.

wazuh-docker

Wazuh - Docker containers

webgoat

WebGoat is a deliberately insecure application

xss

Information Security Project to demonstrate Cross Site Scripting vulnerabilities (Persistent, Reflected)

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.