Episode 197: In this episode of Critical Thinking - Bug Bounty Podcast Joseph, Brandyn, and Ads talk about some recent bugs, and then serve up some tips on how they’re using local AI Models, and optimizing their hardware.
Follow us on twitter at: https://x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout to YTCracker for the awesome intro music!
====== Links ======
Follow your hosts Rhynorater, rez0 and gr3pme on X:
https://x.com/Rhynorater
https://x.com/rez0__
https://x.com/gr3pme
Critical Research Lab:
https://lab.ctbb.show/
Need a Pentest? We just launched CTBB Pentests!
https://pentest.ctbb.show/
Hack full time? Check out the Full-Time Hunter’s Guild!
https://ctbb.show/fthg
====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at https://ctbb.show/discord!
We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.
You can also find some hacker swag at https://ctbb.show/merch!
Sponsored by Intigriti: Join the Waitlist for CrowdRecon!
https://www.intigriti.com/researchers/product/crowdrecon
====== This Week in Bug Bounty ======
Join the H1 Researcher Community Hub on Discord
https://discord.gg/PUhMwsTySt
====== Resources ======
Using Replay Pipelines
https://docs.caido.io/app/guides/replay_test_race_conditions.html
Smashing the token limit with overlapping fragments
https://portswigger.net/research/smashing-the-token-limit
Qwen3.8-Flash-Next-FP4-Local
https://huggingface.co/nvidia/Qwen3.8-Flash-Next-FP4-Local
Prompt Rewriting Tweet
https://x.com/cgtwts/status/2110571916973207906
Muse Spark Open
https://huggingface.co/collections/meta-models/muse-spark-open
Stealth Bench
https://stealthbench.com/
DreadIndex
https://dreadnode.io/research/dreadindex/
Obliterated
https://huggingface.co/OBLITERATUS/feyospace-s1-obliterated
DeepSeek-v4-Flash-DSpark-2x-DGX-Spark
https://github.com/MiaAI-Lab/DeepSeek-v4-Flash-DSpark-2x-DGX-Spark
====== Timestamps ======
(00:00:00) Introduction
(00:04:00) Bugs found with Deepseek
(00:18:15) Caido Race Conditions & Pipeline Session
(00:23:47) Free models in OpenCode, Reset months, and Overlapping Fragments
(00:29:54) Local Models & Hardware Optimization
(00:46:53) Verifiers & Reflections Agents
(00:58:16) Ohmypi, Herdr and other Harnesses
(01:09:20) Muse Spark Open & Stealth Bench, & DreadIndex
(01:18:35) Keeping agents from fighting
