jymit Goto Github PK

followers: 30.0 following: 140.0 repos: 76.0 gists: 20.0

Name: J

Type: User

Bio: Security Engineering Lead

Location: London, UK

Hey! Jymit here.

🤔 It's pronouced Jim-it
💻 In the past ive worked closely on full stack Open Source Software Engineering notably @ Zimbra, Elastic
🛡️ At present working in SecOps Security Engineering at scale
🔭 Working on consolidating some years of notes as well as some of the new stuff im learning and fun into an organised tidy space. Trying and failing to drop daily commits in ~~2022~~. Missed a bunch due to unplanned circumstances.
🌱 I have an interest in macOS security research
🤔 To which, I’m always looking for any new knowledge to do with macOS internals and security - Attended OBTSv5 and looking forward to OBTSv6.
⚡ I like to solve problems, I like to help others solve problems they may have, be it people, software, network, architecture, security...
💬 Ask me Anything
📫 How to reach me 🤔. Where can you find me first?

Currently Research Learning

macOS Security Research

CVEs

WIP - hopefully soon!?

GIAC GIME recently accaccomplished, maybe take on macOS Control Bypasses next, however might take on learning an instrument first.

Technical Writeups in progress

WIP time permitting - Hoping to draft a couple in the next 9-12 months on medium, current ideas are for non technical pieces, thinking social anxiety and working in tech, leadership styles, and empathy as a leader.

Something about nothing

Life Long Learning (a must)
There cannot be any learning without teaching or mentoring (reach out to talk about tech and cyber). Hoping to start doing even more of both in 2023-24, stay tuned.
Some SANS, Some GIACs (who doesnt now a days)
Along with some experience in different tech spaces

To improve the below as time goes on

To Do list (areas I have or am reading about and or want to pursue, implement in some shape or form)

macOS internals / malware / writing and learning my own escapes
Working out time complexity because being able to think or work like a swe is never a bad idea

Recent reading, recommendations

Apple Endpoint Security Framework ESF - Talk from BSides Munich by Connor Morley
Sec updates from AWS - filter by security tool of choice - eg. AWS Security Hub launches 7 new security controls

J's Projects

apple-platform-security-guides

Every Apple Platform Security Guide

atc-react

A knowledge base of actionable Incident Response techniques

attackinganddefendingthegcpmetadataapi

This repo gives an overview of some GCP metadata API attack and defend patterns

av_enum_jxa

JXA code to enumerate security software on a macOS host

awesome-forensics

A curated list of awesome forensic analysis tools and resources

awesome-macos-red-teaming

List of Awesome macOS Red Teaming Resources.

awesome-terraform

Curated list of resources on HashiCorp's Terraform

blockblock

BlockBlock provides continual protection by monitoring persistence locations.

blue-deauth

A simple script that makes possible BLE deauthentication!

bucketserver

Serve GCS Bucket content anonymously from Windows, Linux and MacOS

build-giac-exam-index

capture-the-flag

Remaster Linux Live CD images for the purpose of creating ready to use security wargames with pre-installed vulnerabilities to exploit.

cheatsheet

notes

commonspeak2-wordlists

Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.

crypto-notes

Reverse Engineering Crypto

detection-rules

Collection of YARA-L 2.0 sample rules for the Chronicle Detection API

dotfiles

ebpf-notes

empire

Empire is a PowerShell and Python post-exploitation agent.

entitlementcheck

macOS entitlement check. A Python3 script for macOS to recursively check /Applications and also check /usr/local/bin, /usr/bin, and /usr/sbin for binaries with problematic/interesting entitlements. Also checks for hardened runtime enablement