plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab) header
plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab) profile picture

plenum ๐Ÿ‡น๐Ÿ‡ณ

@plenumlab

I work as a QA and part time bountyhunter. @hackerone @bugcrowd @intigriti Plenum

 France
Joined January 2018
  • Tweets1K
  • Following400
  • Followers3.4K
118Media
Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)Photo by plenum ๐Ÿ‡น๐Ÿ‡ณ (@plenumlab)
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Volerion (@VolerionSec) profile picture
Volerion
@VolerionSec11 Jun 2025
Launching today! Volerion transforms raw CVEs into structured and instant insights #CVE #CyberSecurity #infosec
Image from Volerion (@VolerionSec)
2
17
40
14,877
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Intigriti (@intigriti) profile picture
Intigriti
@intigriti23 Oct 2023
This is how 100 elite hackers look like after smashing @IntelSecurity's live hacking event with @intigriti. Who would love to attend our next LHE? ๐Ÿ™‹โ€โ™€๏ธ
Image from Intigriti (@intigriti)
5
35
8
168
43,546
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Sam Stepanyan (@securestep9) profile picture
Sam Stepanyan@securestep925 Sep 2022
If you are using #Azure Cloud then "Azure Attack Paths" from @fabian_bader is a must-read for anyone tasked with Azure Cloud Security! #CloudSecurity cloudbrothers.info/azure-attโ€ฆ

Azure Attack Paths

Creating and maintaining a secure environment is hard. And with every technology or product added to your environment it gets more complicated. Microsoft Azure as a cloud environment is no exception...

cloudbrothers.info
3
131
3
352
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Oli (C..1..P.H.Y) (@marcolivermunz) profile picture
Oli (C..1..P.H.Y)@marcolivermunz3 Aug 2022
Yesterday evening something beautiful happened. Thanks @0xJeti for making it true. Collaboration is the key to success ๐Ÿค™
Image from Oli (C..1..P.H.Y) (@marcolivermunz)
4
2
71
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Intigriti (@intigriti) profile picture
Intigriti
@intigriti23 Jul 2022
Bug bounty isn't easy. It requires a lot of time and effort. The rewards can be high, but only if you put in the work. @plenumlab understands that and has found some mind-blowing bugs by digging incredibly deep into an application ๐Ÿคฏ #bugbounty #bugbountytips ๐Ÿ‘‡
Image from Intigriti (@intigriti)
3
27
1
153
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
iQimpz (@iqimpz) profile picture
iQimpz@iqimpz22 May 2022
Iโ€™ve had a amazing time meeting all of these amazing people! Truly a great group! @jellemulck @renniepak @SanderWind @real_bitmap @holme_sec @0xJeti @jerreljosee @p4fg @bug_dutch @YanZaX @Z3r0day0x41 @m_milux @0xkasper @GrumpinouT @StanFaas @plenumlab @Kuromatae666 @BitK_
Image from iQimpz (@iqimpz)
1
9
2
31
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
PortSwigger Research (@PortSwiggerRes) profile picture
PortSwigger Research@PortSwiggerRes13 May 2022
Hunting evasive vulnerabilities: finding flaws that others miss - from @albinowax - premiered at Nullcon Berlin. If you didn't catch the live event, it's now available on YouTube. portswigger.net/research/hunโ€ฆ
Hunting evasive vulnerabilities

Hunting evasive vulnerabilities

Do you ever wonder about the vulnerabilities you've missed? Why didn't they show themselves - and will they be discovered by somebody else later? Certain vulnerabilities have a knack for evading audit

portswigger.net
6
140
6
402
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Intigriti (@intigriti) profile picture
Intigriti
@intigriti11 Nov 2021
The @visma live hacking event is coming to an end and you are invited to join the award ceremony ๐ŸŽ‰ Make sure to tune in today at 1pm (CET) during #VismaSecCon! Sign up over here ๐Ÿ‘‰ visma-seccon.github.io/ See you there! #HackWithIntigriti #1337up1121 @HackersMother
Image from Intigriti (@intigriti)
14
1
49
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Sera Brocious (@daeken) profile picture
Sera Brocious@daeken11 Aug 2019
The automatic HTTP+DNS rebinding attack tool that @NahamSec and I demoed as part of our SSRF talk is now public! github.com/daeken/httprebind
GitHub - daeken/httprebind: Automatic tool for DNS rebinding-based SSRF attacks

GitHub - daeken/httprebind: Automatic tool for DNS rebinding-based SSRF attacks

Automatic tool for DNS rebinding-based SSRF attacks - daeken/httprebind

github.com
3
118
344
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
James Kettle (@albinowax) profile picture
James Kettle
@albinowax10 Aug 2019
Solutions are now available for the HTTP Desync Attacks labs portswigger.net/web-securityโ€ฆ by @WebSecAcademy I know quite a few of you have been waiting for this :)
7
74
291
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Th3g3nt3lman (@Th3G3nt3lman) profile picture
Th3g3nt3lman@Th3G3nt3lman8 Aug 2019
Github Recon & Sensetive Data Exposures video for @Bugcrowd university is up youtu.be/l0YsEk_59fQ Hope it will be helpful for new BB hunters and adding more value for current ones, This is for the bug bounty community :) #ittakesacrowd #bugbounty
GitHub Recon and Sensitive Data Exposure

GitHub Recon and Sensitive Data Exposure

Welcome to Bugcrowd University โ€“ GitHub Recon and Sensitive DataEx...

youtube.com
16
218
6
488
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
STร–K โœŒ๏ธ (@stokfredrik) profile picture
STร–K โœŒ๏ธ
@stokfredrik1 Jun 2019
DONโ€™T SPRAY AND PRAY! In this live session, we talk about bug hunting tools, payloads and why you shouldn't spray and pray. How we choose private programs, what kind of wordlists we use, how we deal with periods of not finding bugs and bug fever youtu.be/-RRW5svQ1eE
3
26
2
136
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Ivan Novikov (@d0znpp) profile picture
Ivan Novikov
@d0znpp30 Jan 2019
Here you can find how to bypass XXE detection at WAF/IPS lab.wallarm.com/xxe-that-canโ€ฆ
131
1
231
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
HackerOne (@Hacker0x01) profile picture
HackerOne
@Hacker0x0126 Feb 2019
Booyah! 46 million baby! ๐Ÿ”ฅ๐Ÿ”ฅ๐Ÿ”ฅLetโ€™s celebrate our way to 50 M with the biggest, the baddest, the warmest CTF in HackerOne History! It is so big in fact, the winning report gets $10k ๐Ÿค‘ and the top 5 reports join us in VEGAS for h1-702. #CTF #defcon #Bounties #h1702
Image from HackerOne (@Hacker0x01)
Image from HackerOne (@Hacker0x01)
12
59
8
259
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Intigriti (@intigriti) profile picture
Intigriti
@intigriti22 Feb 2019
Get paid to find security bugs. Sign up today and work wherever you want, whenever you want. #HackWithIntigriti ๐Ÿ‘‰go.intigriti.com/signup ๐Ÿ‘ˆ
Image from Intigriti (@intigriti)
1
3
12
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
nixCraft ๐Ÿง (@nixcraft) profile picture
nixCraft ๐Ÿง@nixcraft4 Feb 2019
When Microsoft says they Love Linux... I know there is something wrong... LOL
16
386
38
1,097
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Nate (@nnwakelam) profile picture
Nate@nnwakelam29 Jan 2019
rhinosecuritylabs.com/aws/awโ€ฆ well this is uh... really cool.

Unauthenticated AWS Role Enumeration (IAM Revisited)

This post on AWS role enumeration demonstrations a new IAM vulnerability in Amazon Web Services. Attackers can use account roles in larger cloud attacks.

rhinosecuritylabs.com
26
76
New blog: "JWT Attack Walk-Through". A how-to guide by @exploresecurity for exploiting the well-known RS-to-HS JSON Web Token (JWT) algorithm confusion vulnerability: bit.ly/2T9kIxR #JWT #Vulnerability #Infosec #Exploit
Image from NCC Group Research & Technology (@NCCGroupInfosec)
53
4
103
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
Tavis Ormandy (@taviso) profile picture
Tavis Ormandy
@taviso23 Jan 2019
This bug was arguably a language specification flaw in PostScript, it required a huge cleanup effort to fix up. There's a working exploit attached. openwall.com/lists/oss-securโ€ฆ
Image from Tavis Ormandy (@taviso)
16
243
14
589
plenum ๐Ÿ‡น๐Ÿ‡ณ retweeted
mRr3b00t (@UK_Daniel_Card) profile picture
mRr3b00t
@UK_Daniel_Card16 Jan 2019
Would people be interested in a guide/paper to hacking/securing Windows Server 2016/2019? I'm writing one and wondered what the interest would be? A few of my friends in the community struggle with securing/pwning Windows compared to Linux based systems)โ€ฆlnkd.in/daJGS5H
22
64
1
379
Load more