Brumens

Curious about advanced techniques to exploit SSTIs? 💉 At @ekoparty, @Brumens2 proved that "limitations are just an illusion", showcasing how to achieve RCE from SSTIs using payloads that bypass traditional constraints 👇 @BugBountyArg #BugBountyTips youtube.com/watch?v=FVm6wY…

Did you know, XXE vulnerabilities can be chained with SSRF to reach internal services? 🤔 Our latest CWE deep dive explains the root causes and impacts of XXE bugs, and has numerous walk-throughs, including for blind, error-based and file upload-related techniques 👇 yeswehack.com/learn-bug-boun…

Alex @Brumens2 is taking on the stage and opening #NahamCon2025 Day 1 with "Python Pitfalls: Turning Developer Mistakes into Vulnerabilities" Join us now 👉🏼 youtube.com/live/xmRDR1etn…

Alex is basically part of NahamCon history at this point… he has spoken at every NahamCon so far 🐍🔥 This year he's back with a workshop packed full of real Python security pitfalls, PoCs, and hands-on examples that will make you look at your code (and other people’s code) very differently. 📆 December 17 ℹ️ Explore the lineup 👉🏼 nahamcon.com

If you need to generate a target-specific wordlist, make sure to check out @xnl_h4ck3r GAP extension. It will scan for sus parameters and generate you a complete wordlist with one click of a button. See it in action 👇

Find the full article here ⤵️ yeswehack.com/learn-bug-boun…