Uploaded September 2020 | Updated September 2026, 2 hours ago
How many times have you heard “it’s not a vulnerability (or bug), it’s a feature” after finding some functionality that you are sure can be used maliciously? It happens quite frequently. There is an entire project called Living of the Land Binaries and Scripts (LOLBAS) that features Microsoft signed binaries and scripts that allow attackers to leverage the built in features for their own good. This happens a lot and it is why we want to talk about how the offensive security industry has evolved and matured from CVEs to TTPs. While finding bugs and vulnerabilities pays, how can one benefit from when it is “a feature”? By creating, sharing, and selling TTPs, we can all benefit from the work that was already done but vendors don’t want to pay for.
Recorded at #Levelup0x07 23 Aug, 2020.
Presented by Bugcrowd.
Follow Bryson: twitter.com/brysonbort
Follow Jorge: twitter.com/jorgeorchilles
Sign up on Bugcrowd: bugcrowd.com
Join the conversation: discord.gg/TWr3Brs
Follow Bugcrowd: twittter.com/Bugcrowd
How many times have you heard “it’s not a vulnerability (or bug), it’s a feature” after finding some functionality that you are sure can be used maliciously? It happens quite frequently. There is an entire project called Living of the Land Binaries and Scripts (LOLBAS) that features Microsoft signed binaries and scripts that allow attackers to leverage the built in features for their own good. This happens a lot and it is why we want to talk about how the offensive security industry has evolved and matured from CVEs to TTPs. While finding bugs and vulnerabilities pays, how can one benefit from when it is “a feature”? By creating, sharing, and selling TTPs, we can all benefit from the work that was already done but vendors don’t want to pay for.
Recorded at #Levelup0x07 23 Aug, 2020.
Presented by Bugcrowd.
Follow Bryson: twitter.com/brysonbort
Follow Jorge: twitter.com/jorgeorchilles
Sign up on Bugcrowd: bugcrowd.com
Join the conversation: discord.gg/TWr3Brs
Follow Bugcrowd: twittter.com/Bugcrowd
