Meet4Shell Argentina 2022
A recap of Meet4Shell 2022, the first in-person meetup of the Argentine Bug Bounty community in more than two years. Two talks stood out: hunting bugs in Electron applications, with a real Microsoft Teams case that paid a six-figure bounty, and a technique for finding valuable information in exposed Postman repositories.

The community goes back in person
During May, a new meetup organised by the Argentine Bug Bounty community took place again, and in person. It was the first one in more than two years, since the previous edition had been organised together with HackerOne.
The talks
The meetup featured great talks. One that stood out was by our friend @p3rro, who shared his whole experience from a year of doing bug bounty on Microsoft’s official programme, where he ended up on the leaderboard of the programme’s most valuable hackers. In his talk he explained in detail how to find bugs in Electron applications, and the example he used was a real bug in the Microsoft Teams platform that earned him a six-figure bounty.
Another interesting talk came from our friend @trelloboy, who explained in simple steps a reliable technique for finding valuable information in exposed Postman repositories, one that landed him several bounties throughout the year.
More than talks
Beyond the talks, there was the chance to catch up with old and new friends from the community, and to take part in a raffle with some very good swag. All the credit goes to the organisers who made this gathering happen.

Why these events matter
Hopefully from now on more sponsors keep joining in to support the Argentine infosec community, so we can keep enjoying events like this one.
Events like these are the real training ground for new talent. Argentina has plenty of infosec talent, but in many cases that talent just needs a small push, and that is exactly what these gatherings end up providing: they are an inspiring factor for a lot of people.
To close, here is a gem of a video, courtesy of the Argentine Bug Bounty community, showing in a few seconds what the event felt like.


