Uploaded March 2025 | Updated September 2026, 2 weeks ago

---

Vinay Prabhushankar &
Murali Vadakke Puthanveetil
owasp2024globalappsecsanfra.sched.com/event/1g3a8/hidden-chains-revealing-high-impact-bugs-from-bounty-submissions

Despite defense in depth bounty hunters continue to bypass security measures. We will chronicle curated submissions from our bug bounty program.

This talk covers bugs that span across application security and infrastructure security domain. Folks from Detection and response will find this especially useful to help further strengthen their D&R capabilities. Frankly we recommend this to all security practitioners (red\blue and purple team) since we will share real world bugs reported to our program and how we applied the learnings to elevate our security program.

Expect to hear root cause analysis, technical details, and mitigations. You will take away practical strategies to elevate your own security program.

-

Managed by the OWASP® Foundation
owasp.org