RivasSec

Infrastructure. Security. Insight.

Field notes on infrastructure security, cloud hardening, Kubernetes, IAM, and OSINT by RivasSec.

Bandit-Clean Pwnagotchi Plugins: How `subprocess` Goes From Risk to Routine

Posted on Wed 10 June 2026 in DevSecOps • 9 min read

pwnagotchi
python
bandit
subprocess
security
supply-chain
hardening

Hardening a Pwnagotchi plugin against Bandit B602/B603/B607: shutil.which() full paths, argv-list calls, input validation, and the nosec discipline.

Never Lose Connection: Multi-Phone Bluetooth Tethering for Pwnagotchi

Posted on Tue 22 July 2025 in Projects • 4 min read

pwnagotchi
bluetooth
networking
python

bt-tether-multi is a Pwnagotchi plugin for intelligent multi-phone Bluetooth tethering with automatic WAN failover and silent-disconnect recovery in the field.