Skip to content
View abhisek's full-sized avatar
👾
Building safedep.io
👾
Building safedep.io
451 followers · 3 following

Achievements

Achievement: Starstruckx3Achievement: Pair Extraordinairex3Achievement: QuickdrawAchievement: Pull Sharkx3Achievement: YOLOAchievement: Arctic Code Vault Contributor

Achievements

Achievement: Starstruckx3Achievement: Pair Extraordinairex3Achievement: QuickdrawAchievement: Pull Sharkx3Achievement: YOLOAchievement: Arctic Code Vault Contributor

Highlights

Organizations

@3SLabs @null-open-security-community @safedep @boringtools

Block or report abhisek

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
abhisek/README.md

Hi there 👋

  • Building safedep.io
  • I’m working on Platform & Security Engineering
  • I’m currently learning how to secure stuff at scale
  • Ask me about infosec, devops, platform engineering, AuthN / AuthZ
  • How to reach me: @abh1sek
  • Pronouns: He/Him
  • Fun fact: I have closed my coffee shop long back

I am experienced in building

  • Multi-product IAM platform for B2B SaaS in fintech space
  • Establishing and implementing devsecops culture within platform engineering
  • Microservice framework development and maintenance
  • Kubernetes native security platform development

My primary techstack currently is Golang. I am also well versed with Ruby on Rails and prefer using it for building management applications that are heavy on relational data.

I have been a security researcher in a past life with some CVEs credited to me

  • CVE-2015-0085
  • CVE-2015-1650
  • CVE-2015-1682
  • CVE-2015-2376
  • [...]

My open source projects

  • safedep/vet - Policy driven vetting of open source packages with malicious package protection
  • safedep/pmg - Security wrapper for npm, pnpm, pip and more package managers with sandboxing
  • safedep/gryph - AI coding agent audit trail tool
  • safedep/xbom - CycloneDX xBOM through static code analysis
  • safedep/code - Static code analysis framework in Go
  • abhisek/wireplay - Network package replay and fuzzing tool

I have been working on microservices, platform engineering, devops, application security 🎡, cloud ☁️ and container 🥊 security. I spoke at conferences and wrote about these topics. I love to have people read, comment and critic them 🤓

Pinned Loading

  1. reverse-engineering-and-malware-analysis reverse-engineering-and-malware-analysis Public

    Course content and slides from my ancient training on Reverse Engineering & Malware Analysis

    154 39

  2. pwnworks pwnworks Public

    Exploitation challenges for CTF

    Shell 63 10

  3. wireplay wireplay Public

    The TCP Session Replay Tool

    Shell 27 6

  4. appsecco/kubeseco appsecco/kubeseco Public

    Application Security Workflow Automation using Docker and Kubernetes

    JavaScript 23 10

  5. container-image-scanner-api container-image-scanner-api Public

    A minimalist Go API to scan Docker images for security vulnerabilities and weaknesses

    Go 5 4

  6. swachalit swachalit Public

    Forked from null-open-security-community/swachalit

    Swachalit - The null Automation Platform that hosts null.co.in. This repository contains code that is periodically synced from development repository. We plan to eventually move to completely open …

    Ruby