Podcast Episodes

Episode 117: Hacking AI Series: Vulnus ex Machina - Part 1

Season 1 Episode 117

Episode 117: In this episode of Critical Thinking - Bug Bounty Podcast Joseph introduces Vulus Ex Machina: A 3-part mini-series on hacking AI applications. In this part, he lays the groundwork and fo…

Published on 4 months, 3 weeks ago

Episode 116: Auth Bypasses and Google VRP Writeups

Season 1 Episode 116

Episode 116: In this episode of Critical Thinking - Bug Bounty Podcast Justin gives a quick rundown of Portswigger’s SAML Roulette writeup, as well as some Google VRP reports, and a Next.js middlewar…

Published on 5 months ago

Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi)

Season 1 Episode 115

Episode 115: In this episode of Critical Thinking - Bug Bounty Podcast Justin and So Sakaguchi sit down to walk through some recent bugs, before having a live mentorship session. They also talk about…

Published on 5 months, 1 week ago

Episode 114: Single Page Application Hacking Playbook

Season 1 Episode 114

Episode 114: In this episode of Critical Thinking - Bug Bounty Podcast we’re diving into SPA and how to attack them.We also cover a host of news items, including some bug write-ups, AI updates, and a…

Published on 5 months, 2 weeks ago

Episode 113: Best Technical Takeaways from Portswigger Top 10 2024

Season 1 Episode 113

Episode 113: In this episode of Critical Thinking - Bug Bounty Podcast we’re breaking down the Portswigger Top 10 from 2024. There’s some bangers in here!

Follow us on X at: https://x.com/ctbbpodcast

G…

Published on 5 months, 3 weeks ago

Episode 112: Interview with Ciarán Cotter (MonkeHack) - Critical Lab Researcher and Full-time Hunter

Season 1 Episode 112

Episode 112: In this episode of Critical Thinking - Bug Bounty Podcast Joseph Thacker is joined by Ciarán Cotter (Monke) to share his bug hunting journey and give us the rundown on some recent client…

Published on 6 months ago

Episode 111: How to Bypass DOMPurify in Bug Bounty with Kevin Mizu

Season 1 Episode 111

Episode 111: In this episode of Critical Thinking - Bug Bounty Podcast Justin interviews Kevin Mizu to showcase his knowledge regarding DOMPurify and its misconfigurations. We walk through some of Ke…

Published on 6 months, 1 week ago

Episode 110: Oauth Gadget Correlation and Common Attacks

Season 1 Episode 110

Episode 110: In this episode of Critical Thinking - Bug Bounty Podcast we hit some quick news items including a DOMPurify 3.2.3 Bypass, O3 mini updates, and a cool postLogger Chrome Extension. Then, …

Published on 6 months, 2 weeks ago

Episode 109: Creative Recon - Alternative Techniques

Season 1 Episode 109

Episode 109: In this episode of Critical Thinking - Bug Bounty Podcast we start off with a quick recap of some of the DeepSeek Drama that’s been going down, and discuss AI in CAPTCHA and 2FA as well.…

Published on 6 months, 3 weeks ago

Episode 108: How to Hack Salesforce, ServiceNow, and Other SaaS Products With Aaron Costello

Season 1 Episode 108

Episode 108: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph bring on Aaron Costello to discuss SaaS security and misconfigurations as a bug class. He also gives some in-d…

Published on 6 months, 4 weeks ago