Critical Thinking - Bug Bounty Podcast

Episode 143: New Cohost + Client-Side Gadgets, LHE Meta — Instant Global Admin in Entra!

Episode 142: Gr3pme's Full-Time Hunting Journey Update, Insane AI research, And Some Light News

Episode 141: Hacking the Pod - Google Docs 0-day & React CreateElement Exploits with Nick Copi (7urb0)

Episode 140: Crit Research Lab Update & Client-Side Tricks Galore

Episode 139: James Kettle - Pwning in Prod & How to do Web Security Research

Episode 138: Caido Tools and Workflows

Episode 137: How We Do AI-Assisted Whitebox Review, New CSPT Gadgets, and Tools from SLCyber

Episode 136: Hacking Cluely, AI Prod Sec, and How To Not Get Sued with Jack Cable

Episode 135: Akamai's Ryan Barnett on WAFs, Unicode Confusables, and Triage Stories

Episode 134: XBOW - AI Hacking Agent and Human in the Loop with Diego Djurado

Episode 133: Building Hacker Communities - Bug Bounty Village, getDisclosed, and the LHE Squad

Episode 132: Archive Testing Methodology with Mathias Karlsson

Episode 131: SL Cyber Writeups, Bug Bounty Metastrategy, and Orphaned Github Commits

Episode 130: Minecraft Hacks to Google Hacking Star - Valentino

Episode 129: Is this how Bug Bounty Ends?

Episode 128: New Research in Blind SSRF and Self-XSS, and How to Architect Source-code Review AI Bots

Episode 127: Drama, PDF as JS Chaos, Bounty Profile Apps, And More

Episode 126: Hacking AI Series: Vulnus ex Machina - Part 3

Episode 125: How to Win Live Hacking Events

Episode 124: Bug Bounty Lifestyle = Less Hacking Time?

Episode 123: Hacking AI Series: Vulnus ex Machina - Part 2

Episode 122: We Won Google's AI Hacking Event in Tokyo - Main Takeaways

Episode 121: Slonser’s Image Injection 0-day -> ATO & New Caido Collab Plugin

Episode 120: SpaceRaccoon - From Day Zero to Zero Day

Episode 119: Abusing Iframes from a client-side hacker

Episode 118: Hacking Happy Hour: 0days on Tap and SQLi Shots

Episode 117: Hacking AI Series: Vulnus ex Machina - Part 1

Episode 116: Auth Bypasses and Google VRP Writeups

Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi)

Episode 114: Single Page Application Hacking Playbook

Episode 113: Best Technical Takeaways from Portswigger Top 10 2024

Episode 112: Interview with Ciarán Cotter (MonkeHack) - Critical Lab Researcher and Full-time Hunter

Episode 111: How to Bypass DOMPurify in Bug Bounty with Kevin Mizu

Episode 110: Oauth Gadget Correlation and Common Attacks

Episode 109: Creative Recon - Alternative Techniques

Episode 108: How to Hack Salesforce, ServiceNow, and Other SaaS Products With Aaron Costello

Episode 107: Bypassing Cross-Origin Browser Headers

Episode 106: Announcing our new cohost...

Episode 105: Best Critical Thinking Moments from 2024

Episode 104: 2024 Hacker Stats & 2025 Goals

Episode 103: Getting ANSI about Unicode Normalization

Episode 102: Building Web Hacking Micro Agents with Jason Haddix

Episode 101: CTBB Hijacked: Rez0__ on AI Attack Vectors with Johann Rehberger

Ep 100 - 8 Fav Bugs of 2024, Farewell Joel, Hello Shift - Cursor of Hacking

Episode 99: Back to the Basics - Web Fundamental to 100k a Year in Bug Bounty

Episode 98: Team 82 Sharon Brizinov - The Live Hacking Polymath

Episode 97: Bcrypt Hash Input Truncation & Mobile Device Threat Modeling

Episode 96: Cookies & Caching with MatanBer

Episode 95: Attacking Chrome Extensions with MatanBer - Big Impact on the Client-Side

Episode 94: Zendesk Fiasco & the CTBB Naughty List