Bug Bounty Village

Behind the scenes at Google’s vuln rewards program

Erb shows us how gzip can be abused to trigger XSS, step by step. Full talk below: youtu.be/t0-oXbczPLs?si…

Get to know a Google security engineer

You Gotta Pump Those Numbers Up 📈

What Google’s security team is dealing with from hackers

Google spent HOW MUCH to get hacked?

@erbbysam breaks down what happens after you hit Submit on a vuln report for Google. Full talk here youtu.be/t0-oXbczPLs

What happens if you find a Googler’s leaked credentials?

Hackers: Raise your hand if you’ve been personally victimized by shady disclosure policies.

It’s TIME to hold GOOGLE accountable! ⏱️

Full talk: youtu.be/t0-oXbczPLs

Google VRP severity isn’t CVSS-driven. Describe impact + exploit path.

What’s your highest ranking on a bug bounty platform?

“We know who sends good reports.” Fair or sketchy? Comment 👇

No complaints here! MAX function BEST function 📈💲

What does ‘triage’ mean in the programs you’ve reported to?

Full talk here youtu.be/t0-oXbczPLs

Google VRP - Built different 💪

DEF CON 33 was our biggest outing yet, and we have a great deal to share with you! We will be posting multiple times per week in the coming weeks sharing talks and snippets from the Bug Bounty Village. Special shout out to @OKX for being our DEF CON 33 Media Sponsor!

Google VRP - Built different 💪 Full talk here: youtu.be/t0-oXbczPLs