Blog
Pivoting into VPC networks
Last week was the first public release of vpcvpnpivot , a tool that allows you to connect to private VPC subnets using an AWS Client VPN. I created this…
Internet-Scale analysis of AWS Cognito Security
Just published the whitepaper for my latest research: InternetScale analysis of AWS Cognito Security. The whitepaper contains the methodology and results of…
Information Security Conferences
Conferences. We have plenty of them these days, good and bad, underground and businessfocused, small, large and extra large. When you are young and start…
Intro to AWS Hacking
New to AWS security? Want to learn more about AWS hacking techniques? You should definitely attend my “Intro to AWS Hacking” training at Ekoparty Los…
BlackHat Training
Will and I have teamed up to bring you the Web Application Hacker Levelup Lab at Black Hat USA 2019! This handson course is designed for hungry…
2019 Information Security Predictions
Cloud computing provider will suffer major breach And we’ll all reconsider running our most businesscritical applications and storing our unencrypted…
Automated Security Analysis AWS Clouds
I’m hooked on cloud security, it has a little bit of everything: network security, application security, automation and DevOps . One of my latest cloud…
Threat modelling
As an external consultant that focuses on application penetration testingI’m not usually invited to application design, business logic discussions or threat…
reCAPTCHA bypass via HTTP Parameter Pollution
tl;dr I reported a reCAPTCHA bypass to Google in late January. The bypass required the web application using reCAPTCHA to craft the request to…
OWASP LATAM Tour 2017
Developers and Application Security Every year OWASP local chapters from Latin America organize a huge one month event called OWASP LATAM Tour, where each…
Hello world
I’m Andrés Riancho, and this is my blog. Hacker: Born and raised Argentine, husband, father, software developer, application and cloud security expert.…