July 16, 2026

Episode 183: PortSwigger Research Impossible XSS SOLVED

Show Notes

Episode 183: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Brandyn talk about looking at AI features like tech features, Using AI to leak private repos, and solving PortSwigger’s Unexploitable XSS labs

Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater, rez0 and gr3pme on X:

https://x.com/Rhynorater

https://x.com/rez0__

https://x.com/gr3pme

Critical Research Lab:

https://lab.ctbb.show/

Need a Pentest? We just launched CTBB Pentests!

https://pentest.ctbb.show/

Hack full time? Check out the Full-Time Hunter’s Guild!

https://ctbb.show/fthg

====== Ways to Support CTBBPodcast ======

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at https://ctbb.show/merch!

Today's Sponsor: Check out Zero Trust Network Access:

https://www.criticalthinkingpodcast.io/tl-ztna

====== This Week in Bug Bounty ======

How LLMs are changing Bug Bounty Interview series

https://www.yeswehack.com/fr/community/llms-bug-bounty-interview-aituglo

https://www.yeswehack.com/fr/community/llms-bug-bounty-interview-rhynorater

https://www.yeswehack.com/fr/community/llms-bug-bounty-interview-icare

====== Resources ======

$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain

https://whoareme.com/blog/cspt-account-takeover-2fa-bypass/

Two Bypasses for Chrome’s Sanitizer API