BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Hacking IDE Extensions - VSCode Workshop\n   Tags: B
 ug Bounty Village | Creator Workshop\n   When: Friday\, Aug 7\, 10:30 - 11
 :30 PDT\n   Where: LVCCW Level 2 W206-207 (Bug Bounty Village) - [1]Map\n\
 n   Description:\n\n   IDE extensions are a lucrative slice of the modern 
 bug bounty scope.\n   They run with privileged capabilities\, parse arbitr
 ary workspace\n   files\, and increasingly ship LLM backed agentic feature
 s that execute\n   commands\, edit files\, and follow instructions found i
 n the project\n   under review. AI assistants have become an exploit chain
  accelerator:\n   agents touch every stage from file ingestion to primitiv
 e acquisition\n   to escalation\, often with minimal sandboxing. This work
 shop turns\n   those ideas into hands on practice. Attendees install "Nopi
 lot"\, a\n   deliberately vulnerable mock AI assistant VS Code extension\,
  learn how\n   to debug it\, review code for bugs\, and chain primitives f
 rom "user\n   opened a folder" to code execution that requires no further\
 n   interaction and bypasses workspace trust entirely. Built around a\n   
 generalized IDE exploitation killchain and drawn from a\n   multi-six-figu
 re IDE bug bounty practice. Bring a laptop and\n   curiosity. Read the ful
 l description here:\n   https://gist.github.com/nickcopi/daf5b24b262c80283
 0ab6c1ef9d5d49d\n\n   SpeakerBio:  Nick "7urb01" Copi\n\n   Nick Copi is a
  full-time bug bounty hunter targeting web applications\,\n   cloud infras
 tructure\, desktop apps\, and pretty much anything with an\n   attack surf
 ace. His background spans application security engineering\,\n   full-stac
 k development\, and a long track record of local CTF\n   competition wins.
  He has presented several technical talks at security\n   conferences and 
 regularly publishes and reviews security research. He\n   really likes Jav
 aScript. Maybe too much. Maybe someone should check on\n   him.\n\n   '\n\
 n   1. #LVCCW_Level2_West\n\n\n
DTEND:20260807T183000Z
DTSTART:20260807T173000Z
LOCATION:Bug Bounty Village - LVCCW Level 2 W206-207 (Bug Bounty Village)
SUMMARY:Hacking IDE Extensions - VSCode Workshop
END:VEVENT
END:VCALENDAR