Critical Thinking - Bug Bounty Podcast

Episode 134: XBOW - AI Hacking Agent and Human in the Loop with Diego Djurado

Episode 133: Building Hacker Communities - Bug Bounty Village, getDisclosed, and the LHE Squad

Episode 132: Archive Testing Methodology with Mathias Karlsson

Episode 131: SL Cyber Writeups, Bug Bounty Metastrategy, and Orphaned Github Commits

Episode 130: Minecraft Hacks to Google Hacking Star - Valentino

Episode 129: Is this how Bug Bounty Ends?

Episode 128: New Research in Blind SSRF and Self-XSS, and How to Architect Source-code Review AI Bots

Episode 127: Drama, PDF as JS Chaos, Bounty Profile Apps, And More

Episode 126: Hacking AI Series: Vulnus ex Machina - Part 3

Episode 125: How to Win Live Hacking Events

Episode 124: Bug Bounty Lifestyle = Less Hacking Time?

Episode 123: Hacking AI Series: Vulnus ex Machina - Part 2

Episode 122: We Won Google's AI Hacking Event in Tokyo - Main Takeaways

Episode 121: Slonser’s Image Injection 0-day -> ATO & New Caido Collab Plugin

Episode 120: SpaceRaccoon - From Day Zero to Zero Day

Episode 119: Abusing Iframes from a client-side hacker

Episode 118: Hacking Happy Hour: 0days on Tap and SQLi Shots

Episode 117: Hacking AI Series: Vulnus ex Machina - Part 1

Episode 116: Auth Bypasses and Google VRP Writeups

Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi)

Episode 114: Single Page Application Hacking Playbook

Episode 113: Best Technical Takeaways from Portswigger Top 10 2024

Episode 112: Interview with Ciarán Cotter (MonkeHack) - Critical Lab Researcher and Full-time Hunter

Episode 111: How to Bypass DOMPurify in Bug Bounty with Kevin Mizu

Episode 110: Oauth Gadget Correlation and Common Attacks

Episode 109: Creative Recon - Alternative Techniques

Episode 108: How to Hack Salesforce, ServiceNow, and Other SaaS Products With Aaron Costello

Episode 107: Bypassing Cross-Origin Browser Headers

Episode 106: Announcing our new cohost...

Episode 105: Best Critical Thinking Moments from 2024

Episode 104: 2024 Hacker Stats & 2025 Goals

Episode 103: Getting ANSI about Unicode Normalization

Episode 102: Building Web Hacking Micro Agents with Jason Haddix

Episode 101: CTBB Hijacked: Rez0__ on AI Attack Vectors with Johann Rehberger

Ep 100 - 8 Fav Bugs of 2024, Farewell Joel, Hello Shift - Cursor of Hacking

Episode 99: Back to the Basics - Web Fundamental to 100k a Year in Bug Bounty

Episode 98: Team 82 Sharon Brizinov - The Live Hacking Polymath

Episode 97: Bcrypt Hash Input Truncation & Mobile Device Threat Modeling

Episode 96: Cookies & Caching with MatanBer

Episode 95: Attacking Chrome Extensions with MatanBer - Big Impact on the Client-Side

Episode 94: Zendesk Fiasco & the CTBB Naughty List

Episode 93: A Chat with Dr. Bouman - Life as a Hacker and a Doctor

Episode 92 - SAML XPath Confusion, Chinese DNS Poisoning, and AI Powered 403 Bypasser

Episode 91: Zero to LHE in 9 Months (feat gr3pme)

Episode 90: 5k Clickjacking, Encryption Oracles, and Cursor for PoCs

Episode 89: The Untapped Bug Bounty Landscape of IoT w/ Matt Brown

Episode 88: News, Tools, and Writeups

Episode 87: 'Hacker Wife' Mariah Gardner on Bug Bounty mentality and relationships

Episode 86: The X-Correlation between Frans & RCE - Research Drop

Episode 85: Practical Applications of DEFCON 32 Web Research