Gonçalo Ribeiro

I'm a cybersecurity professional with nine years of hands-on experience in incident response, vulnerability management, and detection engineering. I have many other interests and projects, some of which are featured here.

Contacts

• Mastodon: goncalor@infosec.exchange
• GitHub: goncalor
• LinkedIn: linkedin.com/in/goncalor
• Email: goncalo.m.ribeiro@tecnico.ulisboa.pt

Works

• Honeypots
• 8BitDo Keyboard Mapper (8bdkbd), a tool to hack the configuration of your 8BitDo keyboard
• Phrack hacking e-zine in .epub format, for reading in e-readers
• Nmap service probe for MSMQ, for Nmap to detect MSMQ servers
• CVE Ark, all published CVE and their changes (deprecated)
• Email authentication status, SPF and DMARC records for a selection of popular domains
• SLAE64 (x86_64 Assembly Language and Shellcoding on Linux), my solutions for the old SLA64 course assignments
• Master's thesis. Useful excerpts on compression:
• Deflate and Gzip, an overview of the Deflate algorithm and its implementation in gzip
• State of the Art in Lossless Data Compression (in 2017)

Blogs

• Reversing the LEGO LOCO game train protocol
• Reversing the 8BitDo Keyboard configuration protocol and writing a free client
• Reversing the MSMQ protocol to create an nmap probe (used by Shodan)
• Why SPF without DMARC isn't enough
• DMARC handling comparison for multiple email providers (in 2020)