Friday Hacks #301, September 18: Vigolium and the Art of Shipping Infrastructure
Posted on by ZhengHao
Date/Time: Friday, September 18 from 7:00pm to 9:00pm SGT
Venue: Seminar Room 12, COM3-01-21, NUS
Sign-up: Luma
Food 🍕 will be served!
1) Vigolium: A High-Quality Hybrid DAST Tool in the Agentic Era
Every DAST tool makes the same tradeoffs: coverage versus false positives, and speed versus depth. LLMs do not erase those tradeoffs; they relocate them. This talk dissects the anatomy of a modern DAST tool and shows how Vigolium was built as a hybrid: a deterministic native engine for breadth, agentic planning and triage for depth, and a runtime-confirmed HTTP request and response behind every finding.
Speaker Profile 🎙️
Jessie “j3ssie” Ho is a security engineer and bug bounty hunter known for building open-source automation tools such as Osmedeus, Jaeles, and Metabigor. Fortune 500 companies have also recognised their work after they found vulnerabilities in their systems.
2) Terraform, Telebots & the Art of Shipping Infrastructure
From Terraform fundamentals to creative hacks for real-world infrastructure provisioning problems, this talk is about the art of getting infrastructure shipped. We will put it into practice by deploying a Telegram bot hosted entirely for free on AWS, before wrapping up with a glimpse into how AI could reshape the way we build and ship infrastructure.
Speaker Profile 🎙️
Justin Hoe is a Software Engineer at GovTech solving cloud infrastructure provisioning challenges at scale.
👋 See you there!