Skip to main content
CPEBuddy
[LIVE] - AI-Powered Web App Hacking (Workshop)

[LIVE] - AI-Powered Web App Hacking (Workshop)

Source: YouTube · Tyler Ramsbey - Hack Smarter · published Oct 29, 2026 · 2:08:50

Cybersecurity
No ratings yet Log in to rate
Transcript Available
Description

Ethical hacker Tyler Ramsbey hosts a free workshop on AI-powered web app hacking, demonstrating the open-source Strix agentic pentesting tool with AWS Bedrock to keep client data private during real pentests 28:08.

Key Takeaways:
• Client data can't legally go to third-party AI vendors—AWS Bedrock with zero logging and zero data retention is the best alternative to costly local models 31:30
• AI isn't for beginners: Strix misses chained attacks and business logic flaws, so manual pentesting skills are still essential 36:48
• AI won't replace pentesters—his current engagements found criticals AI missed via chained attack paths requiring human creativity 47:00
• Setup covers AWS account, budget alerts, IAM user with Bedrock policy, CLI config, and enforcing zero data retention 57:20
• Strix's root agent spawns parallel sub-agents; the live Casino lab demo found 18 issues (one critical), including SSTI to RCE 1:29:40
• Full scans cost ~$30–$60 via Bedrock—trivial versus a $12,000 five-day pentest 45:40

Closing: Based on his pay-what-you-can HackSmarter course, the workshop urges covering legal bases, using Bedrock with retention disabled, and learning AI—or risk being replaced by a pentester who does 2:05:10.

Sources:

  • 28:08 Workshop kickoff and Bedrock rationale
  • 36:48 AI prerequisites for practitioners
  • 45:40 Scan costs vs. pentest engagements
  • 47:00 AI won't replace human pentesters
  • 57:20 AWS setup walkthrough
  • 1:29:40 Live Strix demo on Casino lab
  • 2:05:10 Closing takeaways and course info

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 2 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

So, probably not even writing. This is making me spiral. Oh, God. >> Made a promise to myself. I wouldn't let the fear back in, but then I did though. Told the world that I was sick of running, then went back to running. What a joke. Disappointed. Yeah, me too. I thought I finally have finally made a breakthrough. Guess >> it's the same song you seen it before. Darkness holds out his hand. Then we walk to the floor. Every decision made. Is it mine anymore? Like a puppet with strings. I just don't have a choice. What's the truth? What's a lie? Help me God. Help me Lord. Face your fears. Dry your eyes. Grandma died. What's the point? Lost the keys. Lost my hope. Lost my will. Lost my joy. Lost a friend. Lost my hope. Lost my faith. Lost my boys. Standing back, watching my man shine burn to a…