nullsecure
I'm Brian and I ♥️ security. I started in the United States Air Force as an Intelligence Analyst, and worked with the US Government for a few years before joining the public space. I'm currently managing a great team of Security Engineers and enjoying the challenges of being a Security Manager. I love building things and coming up with new ideas for security, and this site showcases some of the things I've built. Please reach out if you'd like to work on anything together or just wanna chat!
Work
- inSp3ctorA tool I developed to identify public S3 buckets and objects through permutations and wordlists
- AugmentdAwhile back I created a new project that I haven't linked here, called Augmentd (https://augmentd.co/). It's aimed at security engineers/analysts to use in common security tools, most notably: Splunk osquery Streamalert ELK Sysmon Sigma This site is a way for analysts/engineers to share their custom searches/
- Gavel - OSINT Maltego TransformsI've been pretty busy lately with updating Tango to version 2.0 and working on threat_note, but, another project I started on recently was something @__eth0 and I are calling Gavel. Gavel is a set of Maltego transforms that query traffic records in each state. This project started out
- threat_noteAs some of you may have seen, I've been working on a new tool for security researchers to add, store and retrieve indicators pertaining to their research and analysis. Well, I'm excited to announce it's finally on GitHub and ready to be used by analysts. Please note, it's heavily in
- Tango Honeypot Intelligence AppA Splunk app to manage and deploy a set of honeypots, providing rich analytics and dashboards
Latest Posts
- inSp3ctorA tool I developed to identify public S3 buckets and objects through permutations and wordlists
- Maltego Transforms | OSINT | crt.sh Local TransformsI just released some local Maltego transforms for the site, https://crt.sh, which is a tool released by Comodo to identify SSL certificates. This site has so much potential for both sides of security, wether it be mapping an internal network, or making sure nothing wonky is going on
- Maltego Transforms | OSINT | Truepeoplesearch Local TransformsI just released some new local Maltego transforms for truepeoplesearch.com and wanted to go through some things about them in this post. First, truepeoplesearch.com is a relatively newish site for getting some details about a person of interest. It also has some surprisingly great results about the person,
- CTF | Beast ModeWARNING - CTF SPOILERS AHEAD It all started with a tweet by @jms_dot_py... Well this looks pretty interesting: https://www.reddit.com/r/Information_Security/comments/68qsko/help/ #osint ;) Justin posted the above tweet back on May 2nd, and I checked it out for a second, not knowing
- AugmentdAwhile back I created a new project that I haven't linked here, called Augmentd (https://augmentd.co/). It's aimed at security engineers/analysts to use in common security tools, most notably: Splunk osquery Streamalert ELK Sysmon Sigma This site is a way for analysts/engineers to share their custom searches/