Cheating at AppSec How devops tools can be used in digital combat for fun and profit

No ratings

Presented at toorcon2018SanDiego 2018 by

Gene Erik

DevSecOps is becoming the rule not the exception. Right? Applying the "rule" backwards can prove this wrong.The IT industry is all fired up with talk of devOps and DevSecOps. What if someone took those same tools and techniques and applied them backward, not to improve security for their own apps and organizations, but to find bugs in OTHER organizations' systems and code? If only developers had some way to do these checks themselves... This talk is about using static and dynamic analysis tools normally used by developer to chase bug bounties in automated ways.