Hack Smarter: Unleashing AI in Bug Bounty Penetration Testing
Loke Yan Hao examines we share our findings from using AI tools for web penetration testing on bug bounty programmes.
Summary
Architecture and Background
Loke Yan Hao present 'Hack Smarter: Unleashing AI in Bug Bounty Penetration Testing' at DEF CON SG1 CSIT Village, detailing technical frameworks, attack surfaces, and core methodologies in ai-security, bug-bounty, penetration-testing, web-application-security.
Vulnerability Analysis
The technical analysis dissects structural design flaws, protocol vulnerabilities, and edge cases uncovered during rigorous research.
Exploitation and Demonstrations
We share our findings from using AI tools for web penetration testing on bug bounty programmes.
Remediation and Defensive Strategies
Security practitioners and defenders receive actionable defensive controls, hardened configurations, and threat detection strategies to mitigate impact.
Related talks
Creator Stage·52 min
Dane Sherrets · Shlomie Liberow
Deep dives into adversarial prompt injection, context poisoning, and RAG manipulation flaws to help researchers find and demonstrate high-impact AI vulnerabilities.
Creator Stage·22 min
D. Jurado · J. Nogue
Chronicles the deployment of XBOW, an autonomous AI offensive agent that discovered over 200 open-source vulnerabilities and submitted 1,000 bug bounty reports.
CSIT Village·24 min
Sng Peng Boon
Sng Peng Boon examines we share the lessons learnt from testing government web apps - how we prioritised, and what interesting bugs appeared.