Code that gets you pwn(s|d) - Louis Nyffenegger (@snyff) @Bugcrowd
Code that gets you pwn(s|d) - Louis Nyffenegger (@snyff)  @Bugcrowd
Uploaded May 2020 | Updated September 2026, 1 hour ago
In this talk, Louis will cover examples of vulnerabilities that are not necessarily obvious. We will look at some snippets in Golang, Ruby, Python...

In this talk, I will cover the following:
Golang Tempfile
Golang path.Clean
Startswith and URL
Unicode
Unicode and Regexp

You can find an early version of slides here: dropbox.com/s/ahhewk3sptjo1nd/Code%20that%20gets%20you%20pwn%28s%7C%27d%29.pdf?dl=0

Bio:
Louis (@snyff/@pentesterlab) is a security engineer based in Melbourne, Australia. He is the founder of PentesterLab, a learning platform for web penetration testing.

Recorded at #levelup0x06 9 May, 2020.
Presented by Bugcrowd.
Join the conversation https://discord.levelup.sh.
Follow Thomas: twitter.com/snyff
Code that gets you pwn(s|d) - Louis Nyffenegger (@snyff)Start em youngSecurity Flash: Breaking Down H.R. 872Hunting IDOR with Z-winK (Part 2)Bonus points if they mention Bugcrowd 😉Busy submitting P1sLevelUpX - Series 12: Finding Sensitive Data in Android Apps with NerdwellTop hackers on collaboration, crits and collecting bountyHow Netwrix Scales Securely on AWS with BugcrowdHappy hackingLevelUpX - Series 13: SPI Flash for Bug Bounty Hunters with NerdwellIf you’ve ever said, “Sorry, my hands are full,” this is for you 🫵🫵
Bugcrowd |

Code that gets you pwn(s|'d) - Louis Nyffenegger (@snyff)

SHARE TO X SHARE TO REDDIT SHARE TO FACEBOOK WALLPAPER