---
title: Ethiack Blog | Bruno Mendes
description: Bruno is a security researcher with a strong hands-on experience. He began freelancing as an ethical hacker with Ethiack in 2022. As a CTF affictionado, he has led Team Portugal for 3 editions of the ECSC, and achieved a victory in the 2023 ICC with Team Europe. He has also participated in Live Hacking Events where he won multiple prizes for reporting vulnerabilities to Fortune 500 companies. Currently, he is the Head of Hacking at Ethiack.
---
### Bruno Mendes
Bruno is a security researcher with a strong hands-on experience. He began freelancing as an ethical hacker with Ethiack in 2022. As a CTF affictionado, he has led Team Portugal for 3 editions of the ECSC, and achieved a victory in the 2023 ICC with Team Europe. He has also participated in Live Hacking Events where he won multiple prizes for reporting vulnerabilities to Fortune 500 companies. Currently, he is the Head of Hacking at Ethiack.
All Post
- [All Post](https://blog.ethiack.com/blog)
- [Latest on Ethiack](https://blog.ethiack.com/blog/tag/latest-on-ethiack)
- [Cybersecurity 101](https://blog.ethiack.com/blog/tag/cybersecurity-101)
- [Product](https://blog.ethiack.com/blog/tag/product)
- [Case Studies](https://blog.ethiack.com/blog/tag/case-studies)
- [Hacking with AI](https://blog.ethiack.com/blog/tag/hacking-with-ai)
- [Events & Conferences](https://blog.ethiack.com/blog/tag/events-conferences)
Search
[-1.png?width=400&upsize=true&name=Blog%20Post%20Covers%20(300%20x%20175%20px)-1.png) ](https://blog.ethiack.com/blog/bypassing-wafs-for-fun-and-js-injection-with-parameter-pollution)
###### [Bypassing WAFs for Fun and JS Injection with Parameter Pollution](https://blog.ethiack.com/blog/bypassing-wafs-for-fun-and-js-injection-with-parameter-pollution)
[ Bruno Mendes ](https://blog.ethiack.com/blog/author/bruno-mendes)
4 August 2025
[ Read More ](https://blog.ethiack.com/blog/bypassing-wafs-for-fun-and-js-injection-with-parameter-pollution)