Critical Thinking - Bug Bounty Podcast

Episode 163: Best Technical Takeaways from Portswigger Top 10 2025

Episode 162: HackerOne Training AI on Bug Bounty Data?

Episode 161: Cross-Consumer Attacks & DTMF Tone Exfil

Episode 160: Cloudflare Zero-days & Mail Unsubscribing for XSS

Episode 159: Avoiding Downgrades on Google Cloud VRP with Cote and Darby Hopkins

Episode 158: 10hr Marathon Hack-Along Recap + $300k Client-side Bugs

Episode 157: Crushing Pwn2Own & H1 with Kernel Driver Exploits

Episode 156: Chill AMA from bugbounty.forum

Episode 155: 2025 Hacker Stats & 2026 Goals

Episode 154: Starting a Pentesting Company on Top of Bug Bounty

Episode 153: Hacking the Robots of the Future: Hardware, AI, and Bug Bounties with Matt Brown

Episode 152: GeminiJack and Agentic Security with Sasi Levi

Episode 151: Client-side Advanced Topics

Episode 150: ASP.NET MVC Patterns, Popping Oracle Identity, and Esoteric Subdomain Enumeration

Episode 149: DEFCON Debrief: AI Vulns, Unicode Weirdness, and Wild Vulnerability Chains

Episode 148: MCP Hacking Guide

Episode 147: Stupid Simple Hacking Workflow Tips

Episode 146: Hacking Horror Stories

Episode 145: Gr3pme's Secret: Bug Bounty Note Taking Methodology

Episode 144: Google’s Top AI Hackers: Busfactor and Monke

Episode 143: New Cohost + Client-Side Gadgets, LHE Meta — Instant Global Admin in Entra!

Episode 142: Gr3pme's Full-Time Hunting Journey Update, Insane AI research, And Some Light News

Episode 141: Hacking the Pod - Google Docs 0-day & React CreateElement Exploits with Nick Copi (7urb0)

Episode 140: Crit Research Lab Update & Client-Side Tricks Galore

Episode 139: James Kettle - Pwning in Prod & How to do Web Security Research

Episode 138: Caido Tools and Workflows

Episode 137: How We Do AI-Assisted Whitebox Review, New CSPT Gadgets, and Tools from SLCyber

Episode 136: Hacking Cluely, AI Prod Sec, and How To Not Get Sued with Jack Cable

Episode 135: Akamai's Ryan Barnett on WAFs, Unicode Confusables, and Triage Stories

Episode 134: XBOW - AI Hacking Agent and Human in the Loop with Diego Djurado

Episode 133: Building Hacker Communities - Bug Bounty Village, getDisclosed, and the LHE Squad

Episode 132: Archive Testing Methodology with Mathias Karlsson

Episode 131: SL Cyber Writeups, Bug Bounty Metastrategy, and Orphaned Github Commits

Episode 130: Minecraft Hacks to Google Hacking Star - Valentino

Episode 129: Is this how Bug Bounty Ends?

Episode 128: New Research in Blind SSRF and Self-XSS, and How to Architect Source-code Review AI Bots

Episode 127: Drama, PDF as JS Chaos, Bounty Profile Apps, And More

Episode 126: Hacking AI Series: Vulnus ex Machina - Part 3

Episode 125: How to Win Live Hacking Events

Episode 124: Bug Bounty Lifestyle = Less Hacking Time?

Episode 123: Hacking AI Series: Vulnus ex Machina - Part 2

Episode 122: We Won Google's AI Hacking Event in Tokyo - Main Takeaways

Episode 121: Slonser’s Image Injection 0-day -> ATO & New Caido Collab Plugin

Episode 120: SpaceRaccoon - From Day Zero to Zero Day

Episode 119: Abusing Iframes from a client-side hacker

Episode 118: Hacking Happy Hour: 0days on Tap and SQLi Shots

Episode 117: Hacking AI Series: Vulnus ex Machina - Part 1

Episode 116: Auth Bypasses and Google VRP Writeups

Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi)

Episode 114: Single Page Application Hacking Playbook