The official kick for NahamCon 2021! Hosted by NahamSec & TheCyberMentor! 

Bug bounties are a great way to grow your knowledge, get into an infosec career, and make friends. In this discussion panel, hosted by Vickie Li; InsiderPhd, STOK, and Spaceraccoon will chat about how bug bounties have impacted their lives.

The talk is going to cover methods to easily implement data sources of all sorts into the amass engine, to make it the all-in-one recon tool that fits everyone's needs. (@ITSecurityGuard)

If you put your mind to something, amazing things can happen. In this talk, @zseano will give a basic run-down and tips on how to succeed in bug bounties in just 12 months. We hope in this talk, we'll ease some people's concerns and show them with time, effort & patience, the sky's the limit.

Finding your first bug is the biggest hurdle new folks to bug bounty need to overcome, but how you're supposed to do that is often a mystery. Katie breaks down some of the key issues to overcome: automation, recon, bugs to look for, and how on earth do you to hack anyway?

Join us for the first time ever hosting the Hacker Game Show with giveaways from HackTheBox, INE, HackerOne, TryHackMe, Red Bull, an more!

When hacking bug bounty programs it is common to run into software which is produced by a separate third-party vendor. In this talk, we'll discuss our experiences and give advice on how to overcome the many obstacles encountered when hacking enterprise software. (by zlz and sshell_)

What is a community? Why is a hacker community important? Those are some of the questions we try to answer in this panel discussion, featuring STÖK, HackerOne's Sr. Director Global Hacker Community, Luke Tucker and Bugcrowd's Head of Researcher Enablement, Michael 'Codingo' Skelton.

Ever since Farah started working as a triager, she has gotten some great insights about the other side of bug bounty & also learned a lot about good reports and how they lead to faster triage times. In this talk, she will share those insights and help hackers get their bug triaged faster!

Shubs (@infosec_au) loves hacking IIS servers. You should enjoy hacking IIS servers too. Here's what we'll be covering: Dealing with HTTPAPI 2.0 Assets. VHost Hopping. Local File Disclosure to DLLs in ASP.NET MVC applications. Using DNSpy and complex XXE Vectors! 

Prototype pollution is fairly well known, but being a client-side issue it can be difficult to look for at scale. Let's write a bit of Go using the chromedp package to solve that problem! (Presented by TomNomNom)

Pentesting is a popular and highly sought after role in cybersecurity and can be a path to becoming a pentester. In this talk, Phillip Wylie discusses the differences and similarities between pentesting and bug bounty as well as how the experience gained from bug bounty can help you launch a career in pentesting.

Join us for the closing ceremony as we celebrate another year of NahamCon with our awesome speakers, organizers, and volunteers!