west-wind Goto Github PK

followers: 34.0 following: 11.0 repos: 36.0 gists: 9.0

Name: Alex John, B

Type: User

Bio: Shell is only the beginning!

Twitter: Praetorian_GRD

Location: On a red-eye flight

Blog: https://subtlystoic.medium.com/

Hiya folks, I'm Alex!

I'm a Detection & Response Engineer. I speak YARA, SPL, SQL, & Suricata. Blue teamer by day, automation junkie by night & aviation enthusiast by later night.

Check out my recent blog post(s)

Detecting and responding to ESXi ransomware with Splunk

How I managed to get 92% on the GIAC GREM CyberLive exam!

Detecting and Responding to Spring4Shell with Splunk

Languages

ToolStack

Find me on

Alex John, B's Projects

abuse-insights

To extract the usernames attempted by a compromised host. This information is obtained from Abuse IP DB, reports' comments.

awesome-detection-engineering

A list of useful Detection Engineering-related resources.

conti-leaks

A translation of the chats from Conti leaks

conti-pentester-guide-leak

Leaked pentesting manuals given to Conti ransomware crooks

cve-2022-33891

Apache Spark Command Injection PoC Exploit for CVE-2022-33891

first.org-scraper

FIRST.org Incident Response teams' contact information scraper

gooofu

A simple script to automate Google Hacking & save the results to an HTML file during an authorized penetration test

infosec_reference

An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.

lar

Light Armoured Recon is a python script designed to automate passive recon. It automates execution of TheHarvester, whois, Robtex.com, Builtwith.com, DNSrecon, metagoofil, & knockpy.

linuxprivchecker

linuxprivchecker.py -- a Linux Privilege Escalation Check Script

loobins

Living Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in macOS binaries and how they can be used by threat actors for malicious purposes.

masterparser

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

mbe

Course materials for Modern Binary Exploitation by RPISEC

mitigating-web-shells

Guidance for mitigation web shells. #nsacyber

nist-api

Script to get updates about new CVE on nist

A python script to automate recon of OBS buckets & download interesting files on Huawei cloud. The idea behind this project is to help companies that use Huawei Cloud services. Running this tool against a list of newly created OBS buckets, will audit their access and find sensitive files exposed to the internet. The result from this tool can be easily shipped to a SIEM tool.