Friday Hacks #301: Vigolium: Anatomy of a High-Quality Hybrid DAST Tool & Terraform, Telebots and the Art of Shipping Infrastructure
Friday Hacks, by NUS Hackers, is a weekly event where invited speakers share their technical experiences and interests! In this week's session, we have:
Talk 1: Vigolium: Anatomy of a High-Quality Hybrid DAST Tool in the Agentic Era
Every DAST tool makes the same tradeoffs: coverage vs. false positives, speed vs. depth. LLMs don't erase those tradeoffs, they relocate them. This talk dissects the anatomy of a modern DAST tool and shows how Vigolium was built as a hybrid: a deterministic native engine for breadth, agentic planning and triage for depth, and a runtime-confirmed HTTP request and response behind every finding.
Speaker Profile:
Jessie "j3ssie" Ho is a security engineer and bug bounty hunter known for building, open-source automation tools like Osmedeus, Jaeles, and Metabigor. Fortune 500 companies have also recognized their work after they found vulnerabilities in their systems.
Talk 2: Terraform, Telebots & the Art of Shipping Infrastructure
From Terraform fundamentals to creative hacks for real-world infrastructure provisioning problems, this talk is about the art of getting infrastructure shipped. We’ll put it into practice by deploying a Telegram bot hosted entirely for free on AWS, before wrapping up with a glimpse into how AI could reshape the way we build and ship infrastructure.
Speaker Profile:
Justin is a Software Engineer at GovTech solving cloud infrastructure provisioning challenges at scale.
📍 COM3 SR12
🍕🧋will be served!