> Markdown version of [/events/world-congress-2024/sessions/360-let-s-write-an](https://www.wearedevelopers.com/events/world-congress-2024/sessions/360-let-s-write-an). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Let's write an exploit using AI - **Date:** Friday, Jul 19, 2024 - **Time:** 13:00–13:30 (30 min) - **Room:** STAGE 4 (500) - **Event:** World Congress 2024 ## Description AI is on the rise and will, inevitably, help developers to be more efficient. But it is not only developers who benefit from these tools; it's hackers too. AI doesn't care if you are a defender or an attacker. This means bad actors can leverage the amazing capabilities of AI tools to write exploit code – even if they are not full-stack developers or penetration testers. This is concerning and underscores why code security is critical for the safety of society and organisations. When used responsibly, AI can help solve the greatest obstacle to successful software security programs: the imbalance that exists between the effort developers spend finding flaws and the time to fix them. In this session, I will show how I used AI to write an exploit for a publicly know vulnerability. I’m not a “real” developer and only coding for fun. AI made it very simple for me to write a full working exploit. You will come away with in-depth information on the security implications of AI-assisted coding. ## Speaker ### [Julian Totzek-Hallhuber](https://www.wearedevelopers.com/@julian-totzek-hallhuber) Veracode, Manager Solution Architects EMEA & APAC ## Related talks at this congress - [Let’s write an exploit using AI](https://www.wearedevelopers.com/events/world-congress-2024/sessions/113-let-s-write-an) — Julian Totzek-Hallhuber - [The AI Security Survival Guide: Practical Advice for Stressed-Out Developers](https://www.wearedevelopers.com/events/world-congress-2024/sessions/300-the-ai-security) — Mackenzie - [Livecoding with AI](https://www.wearedevelopers.com/events/world-congress-2024/sessions/202-livecoding-with-ai) — Rainer Stropek - [The transformative impact of GenAI for software development and its implications for cybersecurity](https://www.wearedevelopers.com/events/world-congress-2024/sessions/308-the-transformative) — Chris Wysopal