Luke Bremer

Security Consultant

Experience

Luke has 10 years of IT experience and has worked with and wrote applications in .NET and .NET Core, as well as different SPA-based sites. Luke specializes in web application development and penetration testing to demonstrate basic and advanced tactics for identifying security issues in web applications and services.

Education & Certifications

BS from Davenport University

Industry Contributions

Luke has set up static and dynamic code scanners and written secure coding documentation and remediation guides.

Passion for Security

Luke has always had a passion for exploring and securing technology for himself and others. He is part of CTF and bug bounty programs, including TryHackMe, Hack The Box, Burp Suite Academy, and HackerOne.

Recent Blog Posts

JavaScript Essentials for Beginning Pentesters

By Luke Bremer

In Penetration Testing

JavaScript is heavily used in almost all modern web applications. Knowing how to format a .js file, set breakpoints, and alter a script’s logic on the fly can be very helpful when working with web applications. To start, let’s navigate to a website and view the application’s resources. For our example, we are using the...

Read

Cross Site Smallish Scripting (XSSS)

By Luke Bremer

In Penetration Testing, Purple Team Adversarial Detection & Countermeasures

Having small XSS payloads or ways to shorten your payloads ensures that even the smallest unencoded output on a site can still lead to account compromise. A typical image tag with a onerror attribute takes up around 35 characters by itself. <img src=1 onerror="alert('XSS')"> If you would like to prove you can steal credentials or...

Read

How to Get the Most Out of Your Pentest

By Luke Bremer

In Organizational Training, Penetration Testing, Security Testing & Analysis, Training

TL;DR Define the goal of an assessment. Take time to choose the right assessment type. The more detail you give about an asset, the better quality your report will be. Select the right environment for the assessment. Consider the timing for performing the assessment. Communicate internally and make sure everyone is up to speed. Do...

Read

View all posts from Luke