Bug Bounty Village

All Calls are now open for the Bug Bounty Village at #DEFCON34! Submit your paper, apply to volunteer, register an interest in sponsoring the village or seek promotion for your DEF CON tangential event! bugbountydefcon.com/call-index

📢 Calling all hackers! Submit your CFP for the official Bug Bounty Village at @DEFCON 34! Share your research, techniques, or run a workshop. 🕒 Deadline: May 15. Don't miss out! Check the guidelines and submit here bugbountydefcon.com/call-for-papers #bugbounty #infosec #DEFCON34

Veteran bug bounty hunter and podcast host Justin Gardner (@Rhynorater) walks through how to become a Caido power user by mastering the features that dramatically improve efficiency during web application testing. youtu.be/_Y0oexpt-R8

Have you submitted yet?

Remember to submit your CFP before May 15th and become a part of the biggest and best Bug Bounty Village yet - only at DEF CON 34! bugbountydefcon.com/call-for-papers

CFP for Bug Bounty Village @ DEF CON 34 is now OPEN! Submit before May 15th! bugbountydefcon.com/call-for-papers

Sab Erb (AKA erbysam), security engineer at Google, pulls back the curtain on how the Google & Alphabet Vulnerability Reward Programs really work - and kicks things off with a deep (and entertaining) dive into exploiting GZIP for XSS on a Google subdomain. youtu.be/t0-oXbczPLs

Behind the scenes at Google’s vuln rewards program

Erb shows us how gzip can be abused to trigger XSS, step by step. Full talk below: youtu.be/t0-oXbczPLs?si…

Get to know a Google security engineer

You Gotta Pump Those Numbers Up 📈

What Google’s security team is dealing with from hackers

Google spent HOW MUCH to get hacked?

@erbbysam breaks down what happens after you hit Submit on a vuln report for Google. Full talk here youtu.be/t0-oXbczPLs

What happens if you find a Googler’s leaked credentials?

Hackers: Raise your hand if you’ve been personally victimized by shady disclosure policies.

It’s TIME to hold GOOGLE accountable! ⏱️

Full talk: youtu.be/t0-oXbczPLs

Google VRP severity isn’t CVSS-driven. Describe impact + exploit path.

What’s your highest ranking on a bug bounty platform?

“We know who sends good reports.” Fair or sketchy? Comment 👇