DEF CON 32 - Top War Stories from a TryHard Bug Bounty Hunter -Justin Rhynorater Gardner

BLUF: The video details 11 critical vulnerabilities discovered during live bug bounty hunting, highlighting the importance of deep research, threat modeling, and creative thinking in identifying complex exploits.

Key Takeaways:
• Engine X 403 bypass leading to 4.5M PII leaks via path traversal 1:50
• Arbitrary account takeover via exposed API with hardcoded credentials 6:02
• Blind XSS via SMS leading to session token theft and mass account hijacking 10:41
• Snoop on meetings by exploiting a missing audio signal in the join flow 15:51
• Perforce server-to-client RCE via malicious file upload and path traversal 22:39
• Router shell via configuration file injection in DNS mask with tftp server exploitation 31:04

Successful bug hunting requires persistence, curiosity, and deep due diligence—especially in unfamiliar domains like IoT or desktop apps.

Sources:

• 1:50 Engine X 403 bypass with path traversal and PII leak
• 6:02 Arbitrary account takeover via exposed API and hardcoded credentials
• 10:41 Blind XSS via SMS leading to session theft and mass account hijacking
• 15:51 Meeting snooping via missing audio signal in join flow
• 22:39 Perforce RCE via malicious file upload and path traversal
• 31:04 Router shell via DNS mask configuration injection and tftp exploitation