Arjun Chaudhary - The Time Machine v3.0: Digging Through the Past to Hack the Future

This presentation was held at #BSidesBUD2026 IT security conference on 29 April 2026. Short description of the talk: TheTimeMachine is an offensive OSINT and bug bounty recon suite that revives forgotten endpoints from the past using the Wayback Machine. Designed for red teamers, CTF players, and bounty hunters, it automates historical data mining, subdomain extraction, parameter harvesting, and endpoint fuzzing for vulnerabilities like XSS, open redirect, LFI, and SQLi. The suite also integrates a powerful JWT analysis engine to extract, decode, and highlight juicy fields from tokens hidden in archived URLs. TheTimeMachine also hunts leaked archives and even verifies whether archived snapshots are still live. With colorful terminal output, modular CLI tools, and support for custom wordlists, this tool resurrects the buried past to exploit the forgotten future. Dead links don't die here‚ they just get reconned harder. About the Speaker: Arjun is a lead penetration tester by day and a bug bounty hunter by night. Breaking things professionally is his passion, and finding creative ways to exploit systems is what keeps him up at night. He spends his days testing web applications, mobile apps, infrastructure, and cloud environments, hunting for vulnerabilities. His bug bounty work has uncovered critical flaws in major platforms, and he's built custom security tools to make exploitation and testing more efficient. As a tool smith, he enjoys creating utilities that solve real problems in offensive security. Arjun believes the best way to defend systems is to understand how attackers think and operate. Whether it's chaining obscure attack vectors, reversing mobile applications, or automating complex exploitation workflows, he loves the technical challenges that come with the work. When he's not pen testing or chasing bounties, you'll find him competing in CTFs, building new security tools, or experimenting with techniques that push the boundaries of what's possible. https://bsidesbud.com All rights reserved. #bsidesbud2026 #iot #malware