TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    Technology

    Critical Thinking – Bug Bounty Podcast

    A “by Hackers for Hackers” podcast focused on technical content ranging from bug bounty tips, to write-up explanations, to the latest hacking techniques.

    Advertise

    Copyright: © Critical Thinking Podcast

    • Apple Podcasts
    • Google Play
    • Spotify

    Latest Episodes:
    Episode 25: 2xMVH & Multi-million dollar hacker Inhibitor181 Jun 29, 2023
    Show notes

    Episode 25: In this episode of Critical Thinking - Bug Bounty Podcast we talk to Cosmin (@Inhibitor181), fresh off of winning his 2nd MVH! We chat about the time management and strategy of hacking Multi-Target LHEs, determining when to pivot, and how to find normalcy in bug bounty hunting and Live Hacking Events. We also touch on setting up Vuln Pipelines, creating mental models, and Cosmin's terrifying naming schemes. Don't miss this episode packed with both laughs and valuable insights for beginners and seasoned bug bounty hunters alike.

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Today’s Guest:

    https://twitter.com/inhibitor181

    Justin's weird episode with all the Dr. Suess Shit

    https://rss.com/podcasts/ctbbpodcast/966055/?listen-on=true

    Timestamps:

    (00:00:00) Introduction

    (00:02:52) MVH club and Multi-Target stragety

    (00:12:00) Deciding when to pivot

    (00:17:00) File Organization and 'unique' naming approaches

    (00:23:56) Staying up to date on features and updates

    (00:25:46) Hacking Sleep Habits

    (00:28:15) Finding 'Normal Life' in bug bounty and LHE

    (00:33:30) Vuln Pipelines, Wordlists, and full time bug bounty tips

    (00:44:15) Benefits of the Bug Bounty Community

    (00:47:45) Relationships with target companies and programs

    (00:53:15) Creating mental models

    (01:00:30) The Importance of writing good reports

    (01:04:30) How to choose what to hack


    Episode 24: AI + Hacking with Daniel Miessler and Rez0 Jun 22, 2023
    Show notes

    Episode 24: In this episode of Critical Thinking - Bug Bounty Podcast, we chat with Daniel Miessler and Rez0 about the emergence and potential of AI in hacking. We cover AI shortcuts and command line tools, AI in code analysis and the use of AI agents, and even brainstorm about the possible opportunities that integrating AI into hacking tools like Caido and Burp might present. Don't miss this episode packed with valuable insights and cutting-edge strategies for both beginners and seasoned bug bounty hunters alike.

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Today’s Guests:

    https://twitter.com/rez0__

    https://twitter.com/DanielMiessler

    Daniel Miessler’s Unsupervised Learning

    https://danielmiessler.com/

    Simon Willison's Python Function Search Tool

    https://simonwillison.net/2023/Jun/18/symbex/

    oobabooga - web interface for models

    https://github.com/oobabooga/text-generation-webui

    State of GPT

    https://karpathy.ai/stateofgpt.pdf

    AI Canaries

    https://danielmiessler.com/p/ai-agents-canaries

    GPT3.5

    https://community.openai.com/t/gpt-3-5-turbo-0613-function-calling-16k-context-window-and-lower-prices/263263

    GPT Engineer

    https://github.com/AntonOsika/gpt-engineer

    Timestamps:

    (00:00:00) Introduction

    (00:05:40) Using AI for hacking: Developing hacking tools and workflow shortcuts

    (00:11:40) GPT Engineer and Small Developer for Security Vulnerability Mapping

    (00:22:40) The potential dangers of centralized vs. decentralized finance

    (00:24:10) Ethical hacking and circumventing ChatGPT restrictions

    (00:26:09) AI Agents, Reverse API, and Encoding/Decoding Tools

    (00:31:45) Limitations of AI in context window and processing large JavaScript files

    (00:36:50) Meta-prompter: Enhancing prompts for accurate responses from GPT

    (00:41:00) GPT-35 and the new 616K context model

    (45:08) Creating a loader for Burp Suite files or Caido instances

    (00:54:02) Hacking AI Features: Best Practices

    (01:00:00) AI plugin takeover and the need for verification of third-party plugins and tools


    Episode 23: Hacker Loadouts Jun 15, 2023
    Show notes

    Episode 23: In this episode of Critical Thinking - Bug Bounty Podcast, we delve into a different aspect of hardware - Our personal loadouts. We go through the equipment and gear we use to get our jobs done, and share stories about why we picked what we have. We also touch on live hacking events, the growing acceptance of white hat hacking, and some pretty cool news going on in the hacker world. Don't miss this episode packed with tips and strategies for both beginners and seasoned hackers alike!

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Blog post on hacking root EPP servers

    https://hackcompute.com/hacking-epp-servers/

    Behind this Website:

    https://github.com/jonkeegan/behind-this-website

    Tweet about vRealize Network Insight: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/

    Zoom's new vulnerability impact scoring system:

    https://viss.zoom.com/specifications

    Uplift Desks

    https://www.upliftdesk.com/

    Synergy

    https://symless.com/synergy

    Ahnestly chair reviews:

    https://www.youtube.com/c/Ahnestly

    Our producer’s new audio drama ‘Homicide at Heavensgate’

    https://link.sentinelstudios.net/homicide

    Timestamps:

    (00:00:00) Introduction

    (00:02:28) Navigating hacking events and imposter syndrome

    (00:06:30) Blog post on hacking root EPP servers

    (00:10:01) The growing acceptance of white-hat hacking

    (00:12:25) Finding Website Owners and Contact Information

    (00:16:45) VMware vRealize Network Insight CVEs and nginx reverse proxy bypass

    (00:21:30) Zoom's new vulnerability impact scoring system

    (00:27:24) The Importance of Analyzing Systemic Problems in Black Box Testing

    (00:30:40) Documentation, Vulnerable by Design, and acceptable risk

    (Start of main content)

    (00:34:37) Leveling up your Hacker Setup

    (00:37:13) The Importance of your body

    (00:41:30) Investing in ergonomic equipment for computer work

    (00:42:27) Standing Desks: Uplift Desk and DIY standing desk options

    (00:46:00) Portable Tables: Flexible Workspace Solutions

    (00:47:30) Monitor Setup

    (00:54:40) Synergy: One keyboard and mouse across multiple devices

    (00:57:20) Capture Card: Using it as a software display

    (00:58:58) Keyboards and mice

    (01:03:27) Using a Chromebook for lightweight hacking

    (01:08:57) Chair Reviews: The Niche World of High-End Chairs


    Episode 22: Chipping Away at Hardware Hacking Jun 08, 2023
    Show notes

    Episode 22: In this episode of Critical Thinking - Bug Bounty Podcast we talk about some basic/intermediate concepts related to Hardware Hacking. Specifically, we dive into extracting data from eMMC chips in order to get our hands on source code for IoT devices. Don't miss this episode packed with valuable insights, tips, and strategies for beginners and seasoned bug bounty hunters alike!

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Checkout NahamCon:

    https://bit.ly/42vnpMS

    RiverLoop Security Write-up: https://bit.ly/3oSKL1o

    Good Chip-Off Write-up:

    https://bit.ly/3IWym3q

    Scratching chips to expose pins:

    https://bit.ly/45Tj21i

    https://bit.ly/3oJJt8Z

    Chat with Corben on Degrees: https://youtu.be/N9P5PUx-PNQ?t=2311

    Gareth Hayes Tweet:

    https://bit.ly/3qvFNYW

    Huntress - John Hammond - MoveIt Response:

    https://bit.ly/42vTTXv

    Critical Thinking Hardware Hacking Setup - See the gear we're talking about (Affiliate links): https://linke.to/hardwarehackingset

    Timestamps:

    (00:00:00) Introduction

    (01:03) NahamCon's Live Hacking Event and Justin's Presentation on PCI DSS

    (02:40) Depreciation of Data URLs in SVG Use Element

    (04:55) Gareth Hayes and knowledge sharing in the hacking community

    (07:50) Move It vulnerability and and John Hammond’s epic 4 am rants

    (12:18) Identifying promising leads in bug bounty hunting, and knowing when to move on

    (Start of main content)

    (21:40) Hardware Recon, and using Test Pins to Access EMMC Chip

    (26:16) Identifying Chip Pinouts and Continuity Testing

    (29:01) Using Logic Analyzers for Hardware Hacking

    (33:01) Importance of Fundamental Knowledge in Hacking, and the benefits of understanding Electrical Engineering

    (35:46) Replay Protected Memory Block Protocol

    (40:00) Bug Bounty Programs and Hardware Testing Support

    (41:05) Chip Pulling techniques and Essential Equipment for Hardware Hacking

    (59:50) Tips for Buying Hardware Hacking Tools: Research and Specific Use Cases

    (01:06:35) Hardware Hacking: Just scratching the surface.

    (01:08:45) Vulnerability Disclaimer: Pulling OS from a chip does not constitute a Vulnerability.


    Episode 21: Chill Chat with Legendary DoD Hacker Corben Leo Jun 01, 2023
    Show notes

    In this episode of Critical Thinking - Bug Bounty Podcast, we chat with Corben Leo about his journey in bug bounty hunting and ethical hacking. We discuss the state of DNS rebinding in 2023, a Twitter thread by Douglas Day (@ArchAngelDDay) on one-hundred bug bounty rules, and our own unique approaches to bug hunting. We also discuss Corben's recon-focused bug hunting methodology and how he developed it. Don't miss this episode filled with valuable tips, insights, and Corben's Boring Mattress Company.

    Follow us on twitter at: @ctbbpodcast

    Get on our newsletter for some exclusive content: https://www.criticalthinkingpodcast.io/subscribe

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Today’s Guest:

    https://twitter.com/hacker_

    Article on the State of DNS Rebinding in 2023:

    https://research.nccgroup.com/2023/04/27/state-of-dns-rebinding-in-2023/

    See @ArchAngelDDay's twitter thread about 100 bug bounty rules:

    https://twitter.com/ArchAngelDDay/status/1661924038875435008

    Talkback - Cybersecurity news aggregator:

    https://talkback.sh/

    PyPI announces mandatory 2FA:

    https://www.bleepingcomputer.com/news/security/pypi-announces-mandatory-use-of-2fa-for-all-software-publishers/

    Timestamps:

    (00:00:00) Introduction

    (01:05) State of DNS rebinding in 2023

    (04:40) 100 Bug Bounty Rules by @ArchAngelDDay

    (05:30) Give yourself a ‘no bug’ limit

    (07:00) The value of reporting Low and Medium Bugs for Bug Bounty Programs

    (11:15) Reporting Out of Scope Bugs

    (14:30) Reporting IDORs as Access Control Bugs

    (17:28) Talkback

    (18:12) PyPI's mandatory 2FA implementation for software publishers

    (Start of main content)

    (20:07) Starting out in bug bounty/ethical hacking

    (25:00) Hacking methodology and mentorship

    (28:15) Identifying Load Balancers

    (33:20) Triage and live events:

    (38:30) College and Computer Science vs. Cybersecurity

    (45:45) Importance of writing for the Hacker Community

    (51:21) Storytelling and report writing.

    (55:00) When to stop doing recon and start hacking

    (01:00:58) Lessons Learned from BreachlessAI and the pivot to Boring Mattress Co.


    Episode 20: Hacker Brain Hacks - Overcoming Bug Bounty's Mental Tolls May 25, 2023
    Show notes

    Episode 20: In this episode of Critical Thinking - Bug Bounty Podcast, we dive into the world of "hacker brain hacks'' and overcoming challenges in bug bounty hunting. We discuss custom word lists, the rising popularity of Caido as a potential Burp Suite replacement, and Cloudflared tunnels for hosting POCs. We also tackle the mental aspects of bug bounty hunting, from procrastination to imposter syndrome, and share tips for staying motivated and avoiding burnout. Don't miss this episode packed with valuable insights and advice for both beginners and seasoned bug bounty hunters!

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Caido:

    https://caido.io

    Tweet from D3mondev on Sequence Diagram:

    https://twitter.com/d3mondev/status/1660803152755453952

    Sequence diagram software:

    https://sequencediagram.org

    Timestamps:

    (00:00:00) Introduction

    (00:02:36) "Sequence Diagram": Sequence mapping for PoCs

    (00:04:10) "SubReconGPT": AI and GPT in Bug Bounty Hacking

    (00:08:30) "Caido": A Potential Replacement for Burp Suite

    (00:11:34) HackerOne's New Features

    (00:13:00) Cloudflared Tunnels for Red Team Assessments and Payload Hosting

    (00:16:07) Mental challenges in Bug Bounty Hunting

    (00:17:50) Procrastination Education: Letting fear of failure drive you into always learning, never doing.

    (00:22:46) Analysis Paralysis: Starting with Bug Bounty Programs vs VDPs

    (00:27:07) Automation Obsession: "When you're hacking, hack. When you're automating, automate."

    (00:14:34) Imposter Syndrome: You may not be the best, but you're not the worst either.

    (00:31:55) Motivation Deprivation: Stay curious, and set tiered goals

    (00:36:07) Automation Obsession pt2: Do we need to say it again?

    (00:37:25) Reconnaissance Cognizance: Spending too much time on recon and not enough time on hacking

    (00:40:00) Bad Rabbit Holes, RIP Your Goals: Identifying good and bad rabbit holes

    (00:46:01) Set Your Goal Poles: Setting specific goals for yourself.

    (00:48:29) Impact Lacked: Fixating on something that's funky, but simply doesn’t really have impact

    (00:51:00) The Burn-out turn-out: Mending, maintenance, and finding identity and self-worth outside hacking

    (00:58:19) Responsibility Volatility: Balancing Responsibilities and Freedom as a Bug Bounty Hunter

    (01:00:30) Payout Phase-out: Don't stop once you've found one bug.

    (01:02:04) Report on URN Injection


    Episode 19: Audit Code, Earn Bounties (Part 2) + Zip-Snip, Sitecore, and more! May 18, 2023
    Show notes

    Episode 19: In this episode of Critical Thinking - Bug Bounty Podcast we further discuss some tips and tricks for finding vulns once you’ve got source code and some banger tweets/tools that popped up in our feed this week.

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Part 1:

    https://open.spotify.com/episode/2pdTaWHSzl9CY7PgRQtvTi

    Noperator’s Zip-Snip: https://twitter.com/noperator/status/1658313637189111808

    https://github.com/noperator/zip-snip

    https://noperator.dev/posts/zip-snip/

    Insecure’s SIP Bugs: https://twitter.com/ifsecure/status/1656591469518495745

    AssetNote’s Sitecore Bugs: https://blog.assetnote.io/2023/05/10/sitecore-round-two/

    Fyooer’s Shadow Clone: https://github.com/fyoorer/ShadowClone


    Episode 18: Audit Code, Earn Bounties May 11, 2023
    Show notes

    Episode 18: In this episode of Critical Thinking - Bug Bounty Podcast, we dive into everything source-code related: how to get source-code and what to do with it once you have. This episode is packed with great examples of successful source code review, tips on how to review code yourself, and the tools you'll need along the way.

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Crossing the KASM:

    https://www.youtube.com/watch?v=NwMY1umhpgg

    PWNAssistant by Elttam:

    https://www.elttam.com/blog/pwnassistant/#content

    Andre's Git Arbitrary Configuration Injection:

    https://blog.ethiack.com/en/blog/git-arbitrary-configuration-injection-cve-2023-29007

    Jub0b's a Smorgasbord of a Bug Chain:

    https://jub0bs.com/posts/2023-05-05-smorgasbord-of-a-bug-chain/

    Ankur Sundara's Cookie Bugs - Smuggling & Injection:

    https://twitter.com/ankursundara/status/1654556463703134208?t=7nTUSszPB6fS3MkATzxpaQ&s=19

    James Kettle's Notes on Novel Pathways to Poisoning (cool quirks in here):

    https://twitter.com/albinowax/status/1654767919690031106?t=vbVEOML5_QnWByi0m8Nv4A&s=19

    Ignore Irrelevant Scripts During Debugging by Johan Carlsson:

    https://twitter.com/joaxcar/status/1653787336105156616

    Every known way to get references to windows:

    https://bluepnume.medium.com/every-known-way-to-get-references-to-windows-in-javascript-223778bede2d

    VS Code Todo Highlight:

    https://marketplace.visualstudio.com/items?itemName=wayou.vscode-todo-highlight

    VS Code:

    https://code.visualstudio.com/


    Episode 17: LA Live Chat with Five Legendary Hackers May 04, 2023
    Show notes

    Episode 17: In this episode of Critical Thinking - Bug Bounty Podcast we talk with five legendary hackers about some of their favorite bugs. Live. From LA.

    Corben Leo “Lorben CEO” @hacker_

    Sam “ZLZ” “ZOZL” “The King” Curry @samwcyo

    Frans “The Legend” Rosen @fransrosen

    Jonathan “Doc” Bouman @JonathanBouman

    Nagli…NagliNagli @naglinagli

    Shoutout to Jonathan Bouman’s Mom!

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    FOLLOW OUR LINKEDIN ACCOUNT FOR NAGLI:

    https://www.linkedin.com/company/ctbbpodcast

    Sam Curry’s shoutout - Ian Carrol’s Seats.Aero: https://seats.aero/


    Episode 16: The Hacker's Toolkit Apr 20, 2023
    Show notes

    Episode 16: In this episode of Critical Thinking - Bug Bounty Podcast we talk about the hacker’s toolkit. Joel and Justin talk about their VPS setup, go-to hacking tools, most often used Linux commands, and the ways they duct tape all of these together for the big hacks.

    Follow us on twitter at: @ctbbpodcast

    We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

    Shoutout to YTCracker for the awesome intro music!

    ------ Links ------

    Follow your hosts Rhynorater & Teknogeek on Twitter:

    https://twitter.com/0xteknogeek

    https://twitter.com/rhynorater

    Our Boi @rez0__ Dropping Some AI Hackz:

    https://twitter.com/rez0__/status/1648685943539245056?s=20

    LiveOverflow Prompt Injection:

    https://www.youtube.com/watch?v=Sv5OLj2nVAQ

    Joel’s Private Network Solution:

    https://www.zerotier.com/

    Stok & Tomnomnom on Vim/Bash:

    https://www.youtube.com/watch?v=l8iXMgk2nnY

    Latest GhostScript RCE:

    https://offsec.almond.consulting/ghostscript-cve-2023-28879.html

    Intigriti CSRF Basics & Jub0b's Legendary SameSite Article:

    https://twitter.com/intigriti/status/1646104705561403398

    https://jub0bs.com/posts/2021-01-29-great-samesite-confusion/

    Nahamcon:

    http://nahamcon.com/

    Pentah0wnage:

    https://research.aurainfosec.io/pentest/pentah0wnage/

    DNSChef:

    https://github.com/iphelix/dnschef

    Httpx:

    https://github.com/projectdiscovery/httpx

    Espanso:

    https://espanso.org/

    GoWitness:

    https://github.com/sensepost/gowitness


    Previous 1 16 17 18 19 20 Next

    Related Podcasts

    Reply All

    1

    Reply All Games & Hobbies
    Inside VR & AR

    2

    Inside VR & AR Gadgets
    Note to Self

    3

    Note to Self News
    BrainStuff

    4

    BrainStuff Natural Sciences
    This Week in Tech (Audio)

    5

    This Week in Tech (Audio) News
    Hands-On Tech (Audio)

    6

    Hands-On Tech (Audio) Technology
    footer-logo

    Contact Us

    Toll Free: 844-670-7747

    Links

    • Home
    • Top Charts
    • Networks
    • Apps
    • Independents Podcasts
    • Podcast Advertising
    • Podcast News
    • Contact Us
    • About Us
    • Analytics & Insights

    Stay Connected

      Privacy, Terms of Use & Our Code of Ethics Protecting Content Creators Copyrights