Unleash your hacking potential with insider access! Discover how sharing internal system insights can revolutionize bug hunting. In this session, you'll learn new exclusive methods, how to use data for your advantage, and will share real-world success stories. Join us to elevate your bug bounty program and learn how we see the attacks from the inside.

Join Jason as he demystifies modern and cutting edge web testing and recon techniques.

​

​

Join us for a panel discussion with experienced Bug Bounty Program Managers and Hunters. We'll address key questions, discuss challenges, strategies, and the future of bug bounties in the context of emerging technologies and threats. We'll highlight the importance of bug bounties, elements of success, and provide recommendations for maturing programs. A great learning and networking opportunity.

This workshop will focus on understanding the most common ways to takeover and account or elevate your access while performing a pentest or hunting for vulnerabilities.

​

​

Automation techniques for security research or bug bounties can be a deep rabbit hole. But there are plenty of quick and effective methods to get the most out of your automation!​

​

As security researchers, we seek innovative solutions to enhance offensive security. This talk explores creating an AI agent to augment bug bounty and pentesting workflows. Our practical tool aims to enhance efficiency and effectiveness, join us as we explore the possibilities and implications of AI as an offensive assistant in this new era of offensive security.

All bug bounty hunters want one thing: bounties. This workshop is a TLDR of all the bug bounty resources out there, condensed down, and lasered-in on one goal: maximizing your bounties per unit of time spent.

​

​

This talk addresses the challenges in addressing the criticality of AI vulnerabilities in disclosure and payouts. We'll explore the current state of these issues and discuss the potential solutions to improve our approach to AI vulnerability management.

Enhance your bug bounty skills! Learn to identify, enrich, and prioritize targets with tools like subfinder and httpx. Discover hidden files, functionalities, and vulnerabilities using advanced reconnaissance techniques. Don't miss out on mastering the art of uncovering "unknown unknowns" in cybersecurity. Join us!

​

What hacker doesn't love a good vuln story? Well, how about 10? 20? However many I can fit into this presentation? Well, good, that's exactly how many you'll get. All criticals. All paid as criticals. Let's do it.

Meet the minds behind a decade of acclaimed web security research. Whether you'd like to query our thoughts on technical matters or career decisions, share something cool you've found, flood us with Burp Suite feature requests, or simply say hi, this is your chance! We're also giving three presentations at DEF CON so if you'd like to treat this as an extended Q&A for those, that's cool too. Please note this session may be chaotic.