BSides Canberra - Scrutiny on the Bounty

This presentation will look at the relationship we’ve had with bug bounty programs over the last two years. We’ll be outlining methodology and releasing tools that we’ve developed solely to increase the return on time invested to get the best pay-outs possible for the least time put in. We'll be covering multiple methods for identifying assets belonging to an organization, visualization of data, and distributed brute forcing amongst other things. This presentation includes the release of two tools, Altdns and Assetnote, both being a contributing factor to our successes in bug bounties.
Senior Security Analyst Shubham Shah will appear at BSides Canberra - Scrutiny on the Bounty (pun hall of fame plz)