For this meetup, we'll be learning more about some practical tips around tooling and techniques that can be helpful when participating in bug bounties :)

The general format of these meetups is a 30 min to 1 hour talk on a topic related to bug bounties, and then catching up with people at a nearby pub.

Sean Burford will be presenting on the following:

Description:

Learn about the tools, techniques and procedures of a tier three threat actor. How effective note taking led to the first vulnerability reported against a hard target. What you can do to develop your techniques when you find a target with an unfamiliar vulnerability. How good tool use led to an MFA bypass, and finally, how to ensure triage can understand your finds.

Bio:

Sean is a lifelong explorer and tinkerer with over 20 years of industry experience ranging from Sydney startup to Silicon Valley. Sean entertains himself as a hobbyist bounty researcher, leveraging his experience and skills to find vulnerabilities that others miss. Though not prolific, Sean maintains a hit rate of ~25% high impact P1s. Sean has historically presented talks at RuxCon and LinuxConf.

Logistics

Fortunately, we have obtained space for our talk from UTS. I hope that this makes it a bit more accessible for people.

Shout out to UTS's Cyber Security Society for helping us with this.

CB11.04.205 (UTS Building 11, Level 4, Room 205) - https://g.co/kgs/j9keWpX