Andres Riancho

@w3af

linkedin.com/in/ariancho

Buenos Aires w3af.org Joined June 2009

505 Following 7.1K Followers 6.2K Posts

Latest posts 5

Pinned post

Andres Riancho @w3af May 28, 2018

Google's ReCaptcha bypass via HTTP parameter pollution.

New blog post!

andresriancho.com/recaptcha-bypa…

Andres Riancho @w3af Apr 25, 2022

Migrating website from AWS EC2 classic to VPC.

You might see some downtime as I'm no SRE :-)

Andres Riancho @w3af Sep 25, 2020

Using @w3af to detect SSRF as part of AWS hack talk at @ekoparty

Andres Riancho @w3af Sep 16, 2020

+100

Marcos Nils Verified account @marcosnils Sep 15, 2020

Estando en el mes de la seguridad y aprovechando @ekoparty se nos ocurrió hay un curso ad honorem en #thewildcast sobre breaking Docker y Kubernetes. Si hay interés armamos algo.
View quoted post on X

Andres Riancho @w3af Mar 10, 2020

Potentially interesting attack vector for cloud. This needs more research but looks promising :-)

☁️ Andres Riancho @AndresRiancho Mar 7, 2020

Vulnerability: Use Lambda function role to remove MFA from any user

github.com/Beartime234/aw…

This one is low risk, but I imagine that if we look at other lambda functions which are invoked with `aws.iam` as source we'll find some interesting attacks
View quoted post on X