Interested in going full-time bug bounty? Check out our blueprint!

Videos

Sept. 14, 2023

Bug Bounty Ethics & CT Exclusive Bug Reports (Ep. 36)

Episode 36: In this episode of Critical Thinking - Bug Bounty Podcast, Justin and Joel take a break from LHE prep to answer questions about the ethics of bug bounty and share their recent bug finds. We talk Iframes, mobile intercept proxies, open redirects, and that time Justin got shot…

View more
Sept. 12, 2023

Bug Bounty Philosophy - Opportunity Cost #shorts

View more
Sept. 12, 2023

The Bugs Are There Mapping Your Hacking #shorts

View more
Sept. 12, 2023

Mapping Your Hacking Summary #shorts

View more
Sept. 12, 2023

Rhynorater Trust Boundaries #shorts

View more
Sept. 7, 2023

Douglas Day: The King of Collaboration (Ep. 35)

In this episode of Critical Thinking - Bug Bounty Podcast, we're thrilled to welcome Douglas Day, a bug bounty hunter known for his unique methodologies and collaborative spirit. We talk about his approach to finding new endpoints in applications, his ingenious technique of exploiting Intercom widgets, and collaboration preferences and…

View more
Sept. 4, 2023

Should Bug Bounty programs pay for 0-DAYS!? #podcast #bugbounty #hackerone #bugcrowd #shorts

From Episode 34 of the Critical Thinking - Bug Bounty Podcast: https://youtu.be/Cn_-PrzfNS0

View more
Sept. 4, 2023

Bug Bounties should be going DOWN?? #podcast #bugbounty #hackerone #bugcrowd #intigriti #shorts

From Episode 34 of the Critical Thinking - Bug Bounty Podcast: https://youtu.be/Cn_-PrzfNS0

View more
Aug. 31, 2023

The Great Hacker vs Program Debate! (Ep. 34)

In this episode of Critical Thinking - Bug Bounty Podcast, Justin and Joel have both beaten COVID and now square off against each other in a mega-debate representing hackers and program managers respectively. Among the topics included are Disclosures, Dupes, Zero-Day Policy, payouts, budgets, Triage and Retesting. So, if you…

View more
Aug. 28, 2023

Finding your first Bug Bounty #bugbounty #podcast #intigriti #bugcrowd #hackerone #shorts

From Episode 33 with Inti De Ceukelaire: https://youtu.be/MSXf2fSobv8

View more
Aug. 24, 2023

Inti De Ceukelaire: How to hack you way to Metallica VIP (Ep. 33)

In this episode of Critical Thinking - Bug Bounty Podcast, we welcome Inti De Ceukelaire, a seasoned bug hunter known for his creative storytelling and impactful show-and-tell bugs…and let us tell you, his stories do not disappoint! From his bug bounty journey to some pretty wild hacks, Inti captivates us…

View more
Aug. 17, 2023

5 Bug Bounty Write-ups You CANNOT Miss (Ep. 32)

In this episode of Critical Thinking - Bug Bounty Podcast, Joel caught a nasty bug (no, not that kind) so Justin is flying solo, and catches us up to speed on what's been happening in hacking news. Follow us on twitter at: https://twitter.com/ctbbpodcast We're new to this podcasting thing, so…

View more
Aug. 10, 2023

Alex Chapman: How to Be a High-Impact Hacker (Ep. 31)

In this episode of Critical Thinking - Bug Bounty Podcast, we're thrilled to be joined by Alex Chapman, a seasoned InfoSec hacker and bug bounty hunter. We kick off with Alex sharing his hacking journey, from a guest lecturer that inspired him, to working on internal Red Teams, to his…

View more
Aug. 3, 2023

Shubham Shah: From Burgers to Bounties (Ep. 30)

In this episode, we're thrilled to be joined by renowned bug bounty hunter Shubs. We kick off with him sharing his journey from burgers to bugs, and how his friendly rivalry with a fellow hacker fueled his passion for reconnaissance, as well as his love of collaboration. We then shift…

View more
July 27, 2023

Sean Yeoh: Live Chat with an AssetNote Engineer (Ep. 29)

In this episode of Critical Thinking - Bug Bounty Podcast sit down with AssetNote Engineer Sean Yeoh, and pick his brain about what he's learned on his development journey. We talk about the place and importance of message brokers, and which ones we like best, as well as his engineering…

View more
July 20, 2023

CSRFs: Surfing the Web to Higher Bounties (Ep. 28)

In this episode of Critical Thinking - Bug Bounty Podcast, the CSRF’s up, dude! We kick off with a debate about whether or not deep link vulns in mobile apps can be considered CSRF. We also talk browser extensions and tools like Hackbar, PwnFox, and JS Weasel, and Justin tries…

View more
July 13, 2023

The BEST Esoteric Web Vulnerabilities (Ep. 27)

In this episode of Critical Thinking - Bug Bounty Podcast, we've switched places and now Joel is home while Justin is on the move. We break down seven esoteric web vulnerabilities, and talk Cookies, Config File Injections, Client-side path traversals and more. We also briefly discuss appliance hacking, new tools,…

View more
July 6, 2023

Client-side Quirks and Browser Hacks (Ep. 26)

In this episode of Critical Thinking - Bug Bounty Podcast, we're back with Joel, fresh (haha) off of back-to-back live hack events in London and Seoul. We start with his recap of the events, and the different vibes of each LHE, then we dive into the technical thick of it,…

View more
June 29, 2023

Inhibitor181: Two-Time MVH & Multi-Million Dollar Hacker (Ep. 25)

In this episode of Critical Thinking - Bug Bounty Podcast we talk to Cosmin (@Inhibitor181), fresh off of winning his 2nd MVH! We chat about the time management and strategy of hacking Multi-Target LHEs, determining when to pivot, and how to find normalcy in bug bounty hunting and Live Hacking…

View more
June 22, 2023

Daniel Miessler and Rez0: Hacking with AI (Ep. 24)

In this episode of Critical Thinking - Bug Bounty Podcast, we chat with Daniel Miessler and Rez0 about the emergence and potential of AI in hacking. We cover AI shortcuts and command line tools, AI in code analysis and the use of AI agents, and even brainstorm about the possible…

View more
June 15, 2023

Building The ULTIMATE Hacker Setup (Ep. 23)

In this episode of Critical Thinking - Bug Bounty Podcast, we delve into a different aspect of hardware - Our personal loadouts. We go through the equipment and gear we use to get our jobs done, and share stories about why we picked what we have. We also touch on…

View more
June 8, 2023

CHIP-ing Away at Hardware Hacking (Ep. 22)

In this episode of Critical Thinking - Bug Bounty Podcast we talk about some basic/intermediate concepts related to Hardware Hacking. Specifically, we dive into extracting data from eMMC chips in order to get our hands on source code for IoT devices. Don't miss this episode packed with valuable insights, tips,…

View more
June 1, 2023

Corben Leo: Legendary DoD Hacker (Ep. 21)

In this episode of Critical Thinking - Bug Bounty Podcast, we chat with Corben Leo about his journey in bug bounty hunting and ethical hacking. We discuss the state of DNS rebinding in 2023, a Twitter thread by Douglas Day (@ArchAngelDDay) on one-hundred bug bounty rules, and our own unique…

View more
May 25, 2023

Bounty Burnout: Overcoming the Mental Tolls of Hacking (Ep. 20)

In this episode of Critical Thinking - Bug Bounty Podcast, we dive into the world of "hacker brain hacks'' and overcoming challenges in bug bounty hunting. We discuss custom word lists, the rising popularity of Caido as a potential Burp Suite replacement, and cloudflared tunnels for hosting POCs. We also…

View more