At the c0c0n Hacker Hangout, Fahad Faisal from our team spoke about his bug bounty journey, the research he has been doing on web cache poisoning and the automation and AI workflows he uses for bug hunting.
c0c0n is one of the largest hacking and cyber security conferences in South Asia. The Hacker Hangout is the community-driven track where researchers, bounty hunters and security enthusiasts share hands-on knowledge and real-world stories from the field.
Fahad started by covering bug bounty basics, walking through what bug bounty programs are, how they work, and what it takes to get started as a hunter. He then shared the story of how he got into bug bounty, the early challenges, what kept him going, and the lessons he picked up along the way.
A significant portion of the talk was dedicated to his research on web cache poisoning. He broke down how cache poisoning works in practice, the specific techniques he explored, and the kinds of vulnerabilities he found through this research. This covered how caching layers can be abused to serve poisoned responses to other users and the real-world impact these issues carry.
Fahad also walked through his automation workflow and AI setups for bug bounty hunting. He covered how he structures his recon and testing pipeline, the tools and scripts he uses, and where AI fits into the process to speed up discovery and reduce repetitive manual work.
Open the slides (PDF) if they do not display above.
BreachSimRange runs red teaming, threat-led breach and adversary simulation that mirror how modern threat actors operate, so you find the gaps before they do.
Talk to us about Consulting