Skip to content
View d4rpell's full-sized avatar
10 followers · 1 following

Block or report d4rpell

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
d4rpell/README.md

Typing SVG

Security & Platform Engineer

Kubernetes/OpenShift Hardening · Threat Intelligence · Security Research

// PROJECTS.HIGHLIGHT

🕸️ NHI-reach

$ Read-only audit of ServiceAccount privilege-escalation paths in Kubernetes/OpenShift
$ Chains RBAC/SCC grants to cluster-admin, node or Secrets, with evidence per hop
$ Model-verified remediation cuts. Offline-first, single Go binary

🧵 Ariadne

$ Evidence-first CVE triage for Kubernetes and OpenShift
$ Deterministic offline evaluation with auditable, reproducible evidence
$ Built in Go with strict validation, SHA-256 evidence bundles and tested JSON/HTML reporting

🔍 Vuln-Reporter

$ Vulnerability monitoring system, running in production at a Spanish bank
$ Tracks CVEs from Kubernetes and Red Hat feeds
$ Alerts the platform team in real time via Microsoft Teams

🕵️ InfraRecon

$ Shodan + Netlas + HTTP fingerprinting recon pipeline
$ Built to track infostealer C2 panels
$ Identified 120+ active panels across 35 countries in a 2-week scan

// STACK

Python Go Kubernetes OpenShift

📕 Latest Blog Posts

// CONNECT

LinkedIn

Pinned Loading

  1. NHI-reach NHI-reach Public

    Read-only, offline-first CLI auditing non-human identity (ServiceAccount) privilege-escalation paths in Kubernetes/OpenShift: evidence per hop, with cuts verified against the model. Single binary.

    Go 1

  2. Ariadne Ariadne Public

    Evidence-first CVE triage for Kubernetes and OpenShift, with reproducible, auditable decisions.

    Go 1

  3. InfraRecon InfraRecon Public

    CLI tool for tracking infostealer C2 panels using Shodan, Netlas, and HTTP fingerprinting

    Go

  4. DotRat DotRat Public

    DotRat is a Telegram Rat which includes good features and non privileged persistence. Written in C#

    C# 12 4

  5. My-Red-Team-Notes My-Red-Team-Notes Public

    My Red Team Notes, Notes from years ago and new notes.

    PowerShell 6 1