I work as a QA and part time bountyhunter. @hackerone @bugcrowd @intigriti Plenum
France
Joined January 2018
- Tweets1K
- Following400
- Followers3.4K
- Likes1.7K
plenum 🇹🇳 retweeted
Launching today!
Volerion transforms raw CVEs into structured and instant insights
#CVE #CyberSecurity #infosec
plenum 🇹🇳 retweeted
This is how 100 elite hackers look like after smashing @IntelSecurity's live hacking event with @intigriti. Who would love to attend our next LHE? 🙋♀️
plenum 🇹🇳 retweeted
If you are using #Azure Cloud then "Azure Attack Paths" from @fabian_bader is a must-read for anyone tasked with Azure Cloud Security!
#CloudSecurity
cloudbrothers.info/azure-att…
plenum 🇹🇳 retweeted
Yesterday evening something beautiful happened. Thanks @0xJeti for making it true. Collaboration is the key to success 🤙
plenum 🇹🇳 retweeted
Bug bounty isn't easy. It requires a lot of time and effort. The rewards can be high, but only if you put in the work.
@plenumlab understands that and has found some mind-blowing bugs by digging incredibly deep into an application 🤯
#bugbounty #bugbountytips 👇
plenum 🇹🇳 retweeted
I’ve had a amazing time meeting all of these amazing people! Truly a great group!
@jellemulck @renniepak @SanderWind @real_bitmap @holme_sec @0xJeti @jerreljosee @p4fg @bug_dutch @YanZaX @Z3r0day0x41 @m_milux @0xkasper @GrumpinouT @StanFaas @plenumlab @Kuromatae666 @BitK_
plenum 🇹🇳 retweeted
Hunting evasive vulnerabilities: finding flaws that others miss - from @albinowax - premiered at Nullcon Berlin. If you didn't catch the live event, it's now available on YouTube.
portswigger.net/research/hun…
plenum 🇹🇳 retweeted
The @visma live hacking event is coming to an end and you are invited to join the award ceremony 🎉
Make sure to tune in today at 1pm (CET) during #VismaSecCon! Sign up over here 👉 visma-seccon.github.io/
See you there!
#HackWithIntigriti #1337up1121 @HackersMother
plenum 🇹🇳 retweeted
The automatic HTTP+DNS rebinding attack tool that @NahamSec and I demoed as part of our SSRF talk is now public! github.com/daeken/httprebind
plenum 🇹🇳 retweeted
Solutions are now available for the HTTP Desync Attacks labs portswigger.net/web-security… by @WebSecAcademy
I know quite a few of you have been waiting for this :)
plenum 🇹🇳 retweeted
Github Recon & Sensetive Data Exposures video for @Bugcrowd university is up youtu.be/l0YsEk_59fQ
Hope it will be helpful for new BB hunters and adding more value for current ones, This is for the bug bounty community :)
#ittakesacrowd #bugbounty
plenum 🇹🇳 retweeted
DON’T SPRAY AND PRAY!
In this live session, we talk about bug hunting tools, payloads and why you shouldn't spray and pray. How we choose private programs, what kind of wordlists we use, how we deal with periods of not finding bugs and bug fever
youtu.be/-RRW5svQ1eE
plenum 🇹🇳 retweeted
Here you can find how to bypass XXE detection at WAF/IPS lab.wallarm.com/xxe-that-can…
plenum 🇹🇳 retweeted
Get paid to find security bugs. Sign up today and work wherever you want, whenever you want. #HackWithIntigriti
👉go.intigriti.com/signup 👈
plenum 🇹🇳 retweeted
rhinosecuritylabs.com/aws/aw… well this is uh... really cool.
plenum 🇹🇳 retweeted
New blog: "JWT Attack Walk-Through". A how-to guide by @exploresecurity for exploiting the well-known RS-to-HS JSON Web Token (JWT) algorithm confusion vulnerability: bit.ly/2T9kIxR
#JWT #Vulnerability #Infosec #Exploit
plenum 🇹🇳 retweeted
This bug was arguably a language specification flaw in PostScript, it required a huge cleanup effort to fix up. There's a working exploit attached. openwall.com/lists/oss-secur…
plenum 🇹🇳 retweeted
Would people be interested in a guide/paper to hacking/securing Windows Server 2016/2019? I'm writing one and wondered what the interest would be? A few of my friends in the community struggle with securing/pwning Windows compared to Linux based systems)…lnkd.in/daJGS5H