Bug Bounty Village

Official X account for the Bug Bounty Village @DEFCON.

Founded by @infinitelogins and @arl_rose.

[drop @dropn0w]

The recording is finally out! 🎉

Here’s my talk from @defcon 34, presented at the @BugBountyDEFCON !

🤖 AI Nightmare: Hacking at 0-Hour

Once again, a huge thank you to the Bug Bounty Village team for the opportunity!

🎥 Watch the talk here: https://t.co/PS5Mvo9v29

#DEFCON #BugBounty

[Bug Bounty Village @BugBountyDEFCON]

@kittoh_ @securinti Salud. Let us know in the comments what stands out to you

[Bug Bounty Village @BugBountyDEFCON]

@intigriti @intidc Thank you for your service @securinti 🫡

[Bug Bounty Village @BugBountyDEFCON]

@MorboAalst @securinti Absolutely. Let us know your thoughts in the comments!

[Bug Bounty Village @BugBountyDEFCON]

@Jidnna007 @securinti Our pleasure! Let us know what you learn in the comments

[Bug Bounty Village @BugBountyDEFCON]

By "0 dupes" he means 0 reports closed as "duplicate" by the companies he submitted to, not hackbot filtering.

This is the extent of his AI setup for the $50K+ (based on the talk) :
→ one prompt that told Claude to call the support line of every BBP he has access to (thousands of calls)
→ a quick Claude Code tool that brute-forced phone codes for ~$20

No hackbot. He just looked where most don't.

full talk: https://t.co/EHVMkB6CV1

[Bug Bounty Village @BugBountyDEFCON]

@MorboAalst @securinti https://t.co/o5pdJ3fk5F

[Bug Bounty Village @BugBountyDEFCON]

@nuvovin @securinti https://t.co/o5pdJ3fk5F

[Bug Bounty Village @BugBountyDEFCON]

@Ahmed_Drkness @securinti @intigriti https://t.co/o5pdJ3fRVd

[Bug Bounty Village @BugBountyDEFCON]

@ahmed_ah206 @securinti https://t.co/o5pdJ3fk5F

[Bug Bounty Village @BugBountyDEFCON]

@mhdagusprbdi @securinti https://t.co/o5pdJ3fk5F

Plus a couple other of his related write ups!

https://t.co/XwFIOjIPGl

[Inti De Ceukelaire @securinti]

how i hacked 320+ companies that replaced their cs team with "smart" ai agents:
1. drafted a gdpr request to support@
2. changed the FROM header from my e-mail to yours (spoofing)
3. put myself in CC
4. ai agent responds with YOUR data to BOTH of us 😈

more tricks: @intigriti

[Bug Bounty Village @BugBountyDEFCON]

@yz9yt @securinti https://t.co/o5pdJ3fRVd

[Bug Bounty Village @BugBountyDEFCON]

@zanbuilds @securinti https://t.co/o5pdJ3fRVd

[Bug Bounty Village @BugBountyDEFCON]

@0xdln @securinti https://t.co/o5pdJ3fRVd

[Bug Bounty Village @BugBountyDEFCON]

@evildojo666 @securinti https://t.co/o5pdJ3fRVd

[Bug Bounty Village @BugBountyDEFCON]

@rawpayload @securinti https://t.co/o5pdJ3fk5F

[Bug Bounty Village @BugBountyDEFCON]

@djurado9 @securinti https://t.co/o5pdJ3fk5F

[Bug Bounty Village @BugBountyDEFCON]

@kittoh_ @securinti https://t.co/o5pdJ3fk5F

[Bug Bounty Village @BugBountyDEFCON]

@luc_cheung @securinti https://t.co/o5pdJ3fk5F

[Bug Bounty Village @BugBountyDEFCON]

@vivekps143 @securinti https://t.co/o5pdJ3fk5F