Bug Bounty2 min read

Meet4Shell Argentina 2022

A recap of Meet4Shell 2022, the first in-person meetup of the Argentine Bug Bounty community in more than two years. Two talks stood out: hunting bugs in Electron applications, with a real Microsoft Teams case that paid a six-figure bounty, and a technique for finding valuable information in exposed Postman repositories.

Group photo of the attendees at Meet4Shell Argentina 2022

The community goes back in person

During May, a new meetup organised by the Argentine Bug Bounty community took place again, and in person. It was the first one in more than two years, since the previous edition had been organised together with HackerOne.

The talks

The meetup featured great talks. One that stood out was by our friend @p3rro, who shared his whole experience from a year of doing bug bounty on Microsoft’s official programme, where he ended up on the leaderboard of the programme’s most valuable hackers. In his talk he explained in detail how to find bugs in Electron applications, and the example he used was a real bug in the Microsoft Teams platform that earned him a six-figure bounty.

Another interesting talk came from our friend @trelloboy, who explained in simple steps a reliable technique for finding valuable information in exposed Postman repositories, one that landed him several bounties throughout the year.

More than talks

Beyond the talks, there was the chance to catch up with old and new friends from the community, and to take part in a raffle with some very good swag. All the credit goes to the organisers who made this gathering happen.

Group photo of the attendees and organisers of Meet4Shell Argentina 2022
Photo courtesy of the Bug Bounty Argentina community

Why these events matter

Hopefully from now on more sponsors keep joining in to support the Argentine infosec community, so we can keep enjoying events like this one.

Events like these are the real training ground for new talent. Argentina has plenty of infosec talent, but in many cases that talent just needs a small push, and that is exactly what these gatherings end up providing: they are an inspiring factor for a lot of people.

To close, here is a gem of a video, courtesy of the Argentine Bug Bounty community, showing in a few seconds what the event felt like.

Video recap of Meet4Shell Argentina 2022

Keep reading

  • Bug Bounty

    How AI is changing the rules of bug bounty

    AI applied to bug bounty is no longer futurism: it speeds up recon, prioritises findings and drafts reports. Real use cases, hard limits and concrete risks.