Skip to content
View grepstrength's full-sized avatar
21 followers · 8 following

Achievements

Achievement: StarstruckAchievement: Pull SharkAchievement: Quickdraw

Achievements

Achievement: StarstruckAchievement: Pull SharkAchievement: Quickdraw

Organizations

@irchaosclub

Block or report grepstrength

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
grepstrength/README.md

whoami

GRC Engineer

I work as a GRC engineer, integrating security and compliance systems to automate control validation and enforce policy adherence. I perform comprehensive risk assessments and report findings across infrastructure and application configurations. I also reverse engineer software binaries and dynamically analyze their behavior to assess third-party software supply chain risk to the organization. Lastly, I also develop applications to assist in GRC-related workflows.

Security Researcher

I also work as an independent security researcher, where I test applications and infrastructure for vulnerabilities. I also develop security tooling and malware analysis labs.

systeminfo

Skills

I have a background in DFIR and CTI but I've acquired multiple other skills over the years, including risk analysis, malware research, ethical hacking, AI and LLM engineering, GRC engineering, and programming/scripting (primarily Go).

Certifications

Defensive Security - GCTI

Offensive Security - HTB CPTS

Cloud & AI - CCSK | TAISE

ICS - GICSP

GRC - CCZT

Projects

HTB Malware Analysis Sherlock - Loggy & Malevolent ModMaker

Pinned Loading

  1. malsnitch malsnitch Public

    Secrets scanner with a twist... this is for getting threat actor credentials from MALWARE. Acquire TA creds from FLOSS exports, memdumps, Binja exports, etc. to get C2 credentials, embedded API key…

    Go 37 1

  2. grepwatch grepwatch Public

    Open-source dependency behavioral diff engine. This detects malicious changes across multiple development ecosystems: npm, PyPI, Go, Cargo, Maven, and NuGet

    Go 7

  3. WideOpenAI WideOpenAI Public

    Short list of indirect prompt injection attacks for OpenAI-based models.

    39 4

  4. GoRC GoRC Public

    Simple CLI script to assist GRC analysts with risk ranking vendors.

    Go 5

  5. irchaosclub/irchaosclub.github.io irchaosclub/irchaosclub.github.io Public

    TypeScript 13 4

  6. swiss-cheese-software swiss-cheese-software Public

    Intentionally vulnerable web app full of secrets to test security scanners and dependency auditors.

    Python 1