The hacking games: Think like a hacker Pentera Labs x AppSec meetup

This session explores offensive security methodologies drawn from years of penetration testing, red teaming, vulnerability research, and bug bounty experience. It presents techniques for uncovering hidden assets, exposed replicas, and overlooked entry points using search tokens, certificate data, public repositories, response databases such as Shodan and Censys, and fuzzing approaches. The focus is on expanding visibility beyond known production applications to identify forgotten systems and secret APIs that attackers frequently exploit.

The webinar also examines automating CVE prioritization using scripting, scoring systems, public data sources, and static code analysis to focus remediation on what matters most. It contrasts traditional penetration testing with the bug bounty mindset, explaining how hacker-driven curiosity and automation can strengthen proactive defense and help organizations move toward attacker-minded security practices.