Skip to content
CYBER TALKS

Bug Bounty Hunting on Steroids

Anshuman Bhartiya, Glenn Grant

OSINTRecon Village38 minOpen on YouTube ↗

Automating bug bounty hunting through continuous monitoring and reconnaissance task optimization.

Summary

Bug Bounty Challenges

Bug bounty researchers repeat tedious tasks: monitoring for targets, checking common issues, remembering tool flags. Small improvements accumulate, but a better approach exists.

Automation Machine

A bug hunting machine that is always watching, reacts to new targets, handles repetitive tasks, integrates new tools easily, scales affordably, and improves offensive capacity through battle-tested development technologies.

Approach

Bug Bounty Hunting on Steroids leverages development lessons to improve research automation and productivity. Research shares lessons learned and battle-tested approaches.

Applications

The machine monitors own infrastructure to defend against hackers before they can, saving bug bounty payouts. Frameworks discussed will be open sourced with the presentation.

Related talks

Recon Village·16 min

  • DEF CON
  • Recon
  • Date: Aug 2021
  • Location: Las Vegas

The Bug Hunter's Recon Methodology

Tushar Verma

Tushar Verma breaks down a structured reconnaissance methodology for bug bounty hunters, covering subdomain enumeration, content discovery, and asset tracking.

bug-bountyreconsubdomain-enumeration+2