Andres Riancho

[Andres Riancho @w3af]

Google's ReCaptcha bypass via HTTP parameter pollution.

New blog post!

https://t.co/EOZCkuW479

[Andres Riancho @w3af]

Migrating website from AWS EC2 classic to VPC.

You might see some downtime as I'm no SRE :-)

[☁️ Andres Riancho @AndresRiancho]

This is a great resource for anyone looking to create an in house SOC or outsource to an MSSP

https://t.co/n7gVMd86Lc

[☁️ Andres Riancho @AndresRiancho]

Even when an algorithm consistently beats human judgment, people prefer to go with their gut

https://t.co/isxlB5p23E

[☁️ Andres Riancho @AndresRiancho]

I'm trying to find some technical details on what happen with the Twitch hack and data leak, but I'm unable to find anything.

Are there details out there?

[fwd:cloudsec @fwdcloudsec]

Today is the big day! The start of fwd:cloudsec is in a few hours. 🎉
Live stream links and schedule are at: https://t.co/QOXMTq6p65

[☁️ Andres Riancho @AndresRiancho]

CVE-2020-17513: SSRF on Airflow.

Anyone knows how to exploit this vulnerability? I was unable to find the vulnerable parameter(s) or the commit that fixes it in https://t.co/VxpFMc7GCa

[☁️ Andres Riancho @AndresRiancho]

My google calendar needs a defrag.

[☁️ Andres Riancho @AndresRiancho]

If you would have 100k / year to spend on one or two security products, what would you buy?

[☁️ Andres Riancho @AndresRiancho]

This guy found the definitive solution for hard-coded credentials in source code.

A must watch for everyone in #appsec.

https://t.co/kXhJgG1WYO

[Andres Riancho @w3af]

@marcosnils @liqueed_org @acyment @berariel Same

[Inian Parameshwaran 👻 @everConfusedGuy]

Cloud providers: we added another 9 to our service level uptime guarantee.
IBM: We are committing to a whopping 95% uptime

[Aaron @_apbright]

My laptop literally just saved my life... Someone shot through the floor in my apartment building

Shoutout to the surface book @Microsoft @MicrosoftHelps

[Valentin Muro @valenzine]

¡Nuevo correo! ¿Se puede ser un hacker en la escuela? ¿Qué pueden aportar la ética hacker y la cultura del hacer a la enseñanza? ¿Por qué no se promueve el autodidactismo? ¿Se puede enseñar en la escuela a cuestionarlo todo?

Todo esto, y más, en tu bandeja de entrada 💌

[☁️ Andres Riancho @AndresRiancho]

Which #book would you recommend to a technical person like me that wants to become a better CSO / CISO?

Extra cookie points if available on #Kindle

[☁️ Andres Riancho @AndresRiancho]

DevSecOps rants a las 15:30 en #ekoTV

Tomo ideas para mis rants, manden DM :-)

https://t.co/znPOwIjV7U

[☁️ Andres Riancho @AndresRiancho]

Hoy 15:30 en #ekotv @ekoparty hablamos con @fede_k sobre las complejidades de implementar devsecops.

Modo #rant: on

[Andres Riancho @w3af]

Using @w3af to detect SSRF as part of AWS hack talk at @ekoparty

[☁️ Andres Riancho @AndresRiancho]

Vamos a estar hablando sobre como hacemos seguridad en @wildlifestudios dentro de 5 minutos en vivo!

https://t.co/WCOmsP4fMs

Con @ajolo de maestro de ceremonias estelar 💪

[Andres Riancho @w3af]

@angvp OMG WTF

[Martin Tartarelli @tartamar]

Ahora en vivo @ekio_jp tirando magia en el Discord de la @ekoparty #hardwarehacking