logo
episode-header-image
Feb 2024
32m 34s

Episode 57: Technical breakdown from Mia...

Justin Gardner (Rhynorater) & Joseph Thacker (Rez0)
About this episode

Episode 57: In this episode of Critical Thinking - Bug Bounty Podcast, Justin and Joel are live from Miami, and recap their experience and share takeaways from the live hacking event. They highlight the importance of paying attention to client-side routing and the growing bug class of client-side path traversal. They also discuss the challenges of knowing when to cut your losses and the value of tracking time and setting goals. 

Follow us on twitter at: @ctbbpodcast

We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker for the awesome intro music!

------ Links ------

Follow your hosts Rhynorater & Teknogeek on twitter:

https://twitter.com/0xteknogeek

https://twitter.com/rhynorater

------ Ways to Support CTBBPodcast ------

Sign up for Caido using the referral code CTBBPODCAST for a 10% discount. 

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc. 

Timestamps:

(00:00:00) Introduction

(00:03:50) Miami LHE Recap and Takeaways

(00:05:57) Keeping time and cutting losses.

(00:19:07) Roles and Goals

(00:23:33) OAuth

(00:28:52) HTML5 image to img Tip

Up next
Nov 20
Episode 149: DEFCON Debrief: AI Vulns, Unicode Weirdness, and Wild Vulnerability Chains
<p>Episode 149: In this episode of Critical Thinking - Bug Bounty Podcast The DEFCON videos are up, and Justin and Joseph talk through some of their favorites.</p><p>Follow us on <a target="_blank" rel="noopener noreferrer nofollow" href="https://x.com/ctbbpodcast">X</a></p><p>Go ... Show More
1h 2m
Nov 13
Episode 148: MCP Hacking Guide
Episode 148: In this episode of Critical Thinking - Bug Bounty Podcast Justin gives us a crash course on Model Context Protocol.Follow us on twitter at: https://x.com/ctbbpodcastGot any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io ... Show More
32m 26s
Nov 6
Episode 147: Stupid Simple Hacking Workflow Tips
Episode 147: In this episode of Critical Thinking - Bug Bounty Podcast we're talking tips and tricks that help us in hacking that we really should’ve learned sooner.Follow us on twitter at: https://x.com/ctbbpodcastGot any ideas and suggestions? Feel free to send us any feedback ... Show More
58m 48s
Recommended Episodes
Feb 2024
The Suffolk Strangler / Steve Wright - Part 2
<p>PLEASE LISTEN TO <strong>‘SEASON 8 - EPISODE 44’ </strong>FOR PART ONE OF THIS TWO-PART CASE. The bodies of five vulnerable women who went missing from the streets of Ipswich were found over a ten-day period.&nbsp;Suffolk Police launched the most extensive investigation in the ... Show More
1 h
Feb 2024
TIP609: Fooled by Randomness by Nassim Taleb
On today’s episode, Clay reviews Nassim Taleb’s book – Fooled by Randomness. Nassim Taleb is a Lebanon-born American mathematician and statistician whose work concerns problems of randomness, probability, and uncertainty. He’s very well known for his popular books, including The ... Show More
1 h
Nov 2023
Sports Podcasting On A National Level
“Think of our NFL network, it’s 38 podcasts. To source 38 podcasts, you don’t want eight different publishers and 38 different onboarding calls and invoices - it can be a nightmare. So for us, we like to just make it as easy for an advertiser as possible to activate with those mi ... Show More
44m 24s
Jun 2023
Digital Identity w/ ENS Domains
Always mixing business and education, Khori has major experience managing for-profits and non-profits, with a big love for tech and always being an early adopter. Developing an interest in distributed ledger tech, and being passionate about decentralized inclusion and identity, h ... Show More
1h 17m
Feb 2024
BTS | EP.148 - Valentine's Day Horror Stories ft ShxtsnGigs
Welcome to the Behind the Scenes podcast!Today we are joined by our first guests of the year...ShxtsnGigs!!Make sure you follow our page and like, comment, and share this episode with your friends and family if you enjoyed it! 0:00 - Intro02:13 - Who is Your Zaddy?10:55 - Dilemma ... Show More
1h 8m
Nov 2023
Milli Vanilli Unsynced w/Luke & Patrick - Just Shoot It 399
<p>Director Luke Korem is back on the pod! Matt &amp; Oren chat with him and editor Patrick Berry about their new Paramount+ documentary, Milli Vanilli! </p><br><p>Matt's Endorsement: Cuisinart Digital Gooseneck Kettle</p><p>Oren's Endorsement: Polycam's Room Mode</p><p>Luke's En ... Show More
1h 5m
Apr 2023
The secret gamblers using AI to hack horse racing
This week, we go to a racetrack in Miami, Florida to drink some beers, place some bets, and discover how AI is changing the sport of horse racing. FT data journalist Oliver Roeder joins Lilah to talk about how the ancient sport is being upended by anonymous computer-assisted bets ... Show More
23m 21s
Feb 2024
BTS l EP.150 - "Platonic Friendships are a Myth!"
Welcome to the Behind the Scenes podcast! Make sure you follow our page and like, comment, and share this episode with your friends and family if you enjoyed it!  0:00 Intro 0:45 Dilemma32:57 How Was Your Week & Song of the Week47:00 Twitter Thread51:56 Hot Gist: Who TF Did I Mar ... Show More
1h 17m
Feb 2024
#723: In Case You Missed It: January 2024 Recap of "The Tim Ferriss Show"
<p><strong><em>This episode is brought to you by&nbsp;</em></strong><a href="https://go.tim.blog/5-bullet-friday-1/?utm_source=timblog&amp;utm_medium=timblog&amp;utm_campaign=podcast-sponsorship" rel="noopener noreferrer" target="_blank"><strong><em>5-Bullet Friday</em></strong>< ... Show More
48m 19s
Feb 2024
What Really Happened At The Streamer Awards | Wine About It
<p>This week QT and Maya are back together in person. They discuss this years Streamer Awards, call out people who don't show up after RSVPing , and Maya is going to Brazil.</p><p>✨ Bonus Content:&nbsp;<a href="https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpat ... Show More
1h 4m