Lucas PHILIPPE / @BitK

Security Researcher, YesWeHack

Bitk is a famous French Security Researcher, Bug Hunter, Member of the french CTF team @Hexpresso and Tech Ambassador at @YesWeHack.

He is the author of YesWeBurp (a must have bug bounty plugin).

Some of his CTF achievement are: 1st place CsCamp CTF 2012 (Egypt) 1st place Atast CTF 2013 (Tunisia) 1st place Hacknoledge 2013 (France) 2nd place Steria Hacking Contest 2013 (France) 1st place Steria Hacking Contest 2014 (France) 1st place International Forum on Cybersecurity 2014, 2016, 2017 (France) 2nd place Defcon open CTF 2014 (USA) 1st place StHack 2018 (France) 4times finalist at the Nuit du Hack 2013, 2014, 2016, 2017 (France) finalist Real Worl dCTF 2018 (China) 1st place 50M CTF 2019 (USA).

All Sessions by Lucas PHILIPPE / @BitK

  • Sponsoring Track


  • 11:35  - 12:05
    With the rise of popularity of bug bounty within companies, more and more people are trying to make a living doing ethical hacking. But while low hanging bugs are still easy to find, making big bounty can be difficult. The goal of this talk is to give advice to hunter on how to transform low impacts bugs into more valuable ones.
    We will explore 3 different scenarios. The third scenario includes a demonstration of a new tool made to help hunters exploit this kind of vulnerability:

    • First, we will exploit a self XSS and a lack of CSRF token, two low impacts bugs. But, chained together and with the usage of JS services workers allow an attacker to take persistent control of a victim browser even after the bug is fixed.
    • Then we will demonstrate how a to get a root access on a server running docker using only a SSRF attack. The server will be running NodeJS and Axios as an http client.
    • Finally, we will use a template injection on a flask application to exfiltrate private data from a read-only server by injecting a backdoor directly into memory.




Share

Lucas PHILIPPE / @BitK