RivasSec

Infrastructure. Security. Insight.

Field notes on infrastructure security, cloud hardening, Kubernetes, IAM, and OSINT by RivasSec.

Bandit-Clean Pwnagotchi Plugins: How `subprocess` Goes From Risk to Routine

Posted on Wed 10 June 2026 in DevSecOps • 9 min read

Hardening a Pwnagotchi plugin against Bandit B602/B603/B607: shutil.which() full paths, argv-list calls, input validation, and the nosec discipline.

Posted on Thu 04 June 2026 in DevSecOps • 5 min read

TLS gets easier when you stop walking the handshake and name what it's for. It does three jobs; anchor those and it becomes design, not memorization.