Eduardo Gonzalez

Free time hacker, software supply chain security, former OpenStack Kolla PTL, Python, Cloud, DevSecOps. IRC: egonzalez / xNaaro

[Eduardo Gonzalez @egongu90]

I just published Building a secure development framework https://t.co/SYssr3esQ8

[Eduardo Gonzalez @egongu90]

Provenance in software supply chain security means knowing exactly where every piece of your software comes from.

https://t.co/5XAOJtFmvH

#security #ssdlc #cicd #softwaresupplychain #provenance #devsecops #devops #softwaresecurity

[Eduardo Gonzalez @egongu90]

Software is everywhere—your phone, your computer, even your car. But how safe is it? Today, we talk about software supply chain security. It’s a big deal, and if you ignore it, you’re asking for trouble.

#softwaresupplychain #security #dev #devsecops

https://t.co/tpSwuXZEUh

[Eduardo Gonzalez @egongu90]

The software supply chain is a disaster waiting to happen. SolarWinds got hit hard, Log4j blew up in everyone’s face, and dependencies keep turning into attack vectors. If you think your app’s safe because you’ve got basic defenses, think again

https://t.co/NNw3yr2pLs

[Eduardo Gonzalez @egongu90]

@CloudNativeFdn Good luck trying to force something ilegal

[Eduardo Gonzalez @egongu90]

Dyplesher was my very first Insane Hack The Box machine. Drove me nuts to find an initial foothold but root was not much harder than a medium/hard box.

https://t.co/iGVVdwOuEe
#htb #hackthebox #hacking #dyplesher

[Eduardo Gonzalez @egongu90]

Fatty is an insane rated machine in HacktheBox, it was extremely fun. This box will make you reverse engineer a java client and a server, write some code and learn how symlink really works behind different technologies.

https://t.co/7eGxZevGLK

#HTB #fatty #writeup #HackTheBox

[Eduardo Gonzalez @egongu90]

https://t.co/f0GSVhJ3EE
#HTB #hackthebox #oouch #writeup

[Eduardo Gonzalez @egongu90]

Sauna Hack The Box writeup

https://t.co/tLA1NwLRah

[Simon Roses @simonroses]

😂😂😂 #Priceless #infosec #CyberSecurity

[Eduardo Gonzalez @egongu90]

https://t.co/5UFGc4tQUK

[Eduardo Gonzalez @egongu90]

Vulnerable flask server to learn and practice common python vulnerabilities https://t.co/9WubrBuVPv

[Eduardo Gonzalez @egongu90]

Tiny java client to query SQL in a non interactive shell

https://t.co/kVGggS5Mpv

[Eduardo Gonzalez @egongu90]

@s0md3v ATM Cherrytree and looking for joplin or directly private git repo with markdown files

[Eduardo Gonzalez @egongu90]

@Bugcrowd

[Eduardo Gonzalez @egongu90]

After 25.5 hours of legit work, finally rooted my first Insane box Dyplesher!! #htb @hackthebox_eu

[Eduardo Gonzalez @egongu90]

@CiroEgipto @bertorome @EconoCabreado @Pablo_Iglesias_ ok, boomer

[Forocoches @forocoches]

ForoCoches lanza su mayor recaudación, para niños con cáncer ingresados en hospitales está Navidad, ¡PARTICIPA! 👇🏻👇🏻 https://t.co/E6R53yC6rK
¡Iremos dando invi sobre este tuit, haz RT!