jymit / gcpbucketbrute

A script to enumerate Google Storage buckets, determine what access you have to them, and determine if they can be privilege escalated.

Hey! Jymit here.

• 🤔 It's pronouced Jim-it
• 💻 In the past ive worked closely on full stack Open Source Software Engineering notably @ Zimbra, Elastic
• 🛡️ At present working in SecOps Security Engineering at scale
• 🔭 Working on consolidating some years of notes as well as some of the new stuff im learning and fun into an organised tidy space. Trying and failing to drop daily commits in 2022. Missed a bunch due to unplanned circumstances.
• 🌱 I have an interest in macOS security research
• 🤔 To which, I’m always looking for any new knowledge to do with macOS internals and security - Attended OBTSv5 and looking forward to OBTSv6.
• ⚡ I like to solve problems, I like to help others solve problems they may have, be it people, software, network, architecture, security...
• 💬 Ask me Anything
• 📫 How to reach me 🤔. Where can you find me first?

Currently Research Learning

macOS Security Research

CVEs

WIP - hopefully soon!?

• GIAC GIME recently accaccomplished, maybe take on macOS Control Bypasses next, however might take on learning an instrument first.

Technical Writeups in progress

WIP time permitting - Hoping to draft a couple in the next 9-12 months on medium, current ideas are for non technical pieces, thinking social anxiety and working in tech, leadership styles, and empathy as a leader.

Something about nothing

• Life Long Learning (a must)
• There cannot be any learning without teaching or mentoring (reach out to talk about tech and cyber). Hoping to start doing even more of both in 2023-24, stay tuned.
• Some SANS, Some GIACs (who doesnt now a days)
• Along with some experience in different tech spaces

To improve the below as time goes on

To Do list (areas I have or am reading about and or want to pursue, implement in some shape or form)

• macOS internals / malware / writing and learning my own escapes
• Working out time complexity because being able to think or work like a swe is never a bad idea

Recent reading, recommendations

• Apple Endpoint Security Framework ESF - Talk from BSides Munich by Connor Morley
• Sec updates from AWS - filter by security tool of choice - eg. AWS Security Hub launches 7 new security controls