Using x-request-id to access ANY account via Header Injection!
Using x-request-id to access ANY account via Header Injection! (with Frans Rosén) #bugbountytips #bugbounty #bugbounties
Using x-request-id to access ANY account via Header Injection! (with Frans Rosén) #bugbountytips #bugbounty #bugbounties
Episode 90: In this episode of Critical Thinking - Bug Bounty Podcast Joel and Justin recap some of their recent hacking ups and downs and have a lively chat about Cursor.Then they cover some some research about SQL Injections, Clikjacking in Google Docs, and how to steal your Telegram account…
(with Frans Rosén) #bugbountytips #bugbounty #bugbounties
For full-time bug hunters, balancing intense work with nurturing a relationship can be tough. This video dives into strategies like setting boundaries, having intentional conversations, and showing respect through small actions like being present and giving your partner full attention when it matters most. #bugbountytips #bugbounty #bugbounties
Mariah's goal system that keeps Justin motivated in full time bug bounty hunting! #bugbountytips #bugbounty #bugbounties
It's a great question. Mariah shares how much time it takes Justin! #bugbountytips #bugbounty #bugbounties
Episode 89: In this episode of Critical Thinking - Bug Bounty Podcast We’re joined live by Matt Brown to talk about his journey with hacking in the IoT. We cover the specializations and challenges in hardware hacking, and Matt’s personal Methodology. Then we switch over to touch on BGA Reballing,…
Plus some great tips for your first time LHE! #bugbountytips #bugbounty #bugbounties
Episode 88: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel tackle a whole slate of new research including a new cheat sheet for URL validation bypass from Portswigger, the introduction of Sanic DNS as a high-speed DNS resolver, xsstools, and the Dockerization of Orange Confusion…
Episode 87: In this episode of Critical Thinking - Bug Bounty Podcast Justin sits down with none other than his wife Mariah to talk about Bug Bounty from the perspective of a Significant Other. They share how they’ve traversed travel and Live Hacking Events, household chores, hobbies, goals, rewards, as…
Episode 86: In this episode of Critical Thinking - Bug Bounty Podcast Frans blows Justin’s mind with a sneak peak of his new presentation. Note: This is a little different from our normal episode, and video is recommended. So head over to ctbb.show/yt if you feel like you’re missing something.…
Episode 85: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel talk through some of the research coming out of DEFCON, mainly from the PortSwigger team. Web timing attacks, cache exploitation, and exploits related to email protocols are all featured. Plus we also talk some fun…
Episode 84: In this episode of Critical Thinking - Bug Bounty Podcast, Justin is joined by Roni Carta (@0xLupin) to discuss their MVH win at the recent Google LHE, and share some technical observations they had with the target and the event. Follow us on twitter at: @ctbbpodcast We're new…
Wanna dive into IoT device research? Grab a device, hook it up with UART or JTAG, and start poking around. Try some tricks like glitching or looking for sneaky firmware backdoors to get in. Here's a quick rundown. #bugbountytips #bugbounty #bugbounties
Pwn2Own competitions can be a cruel mistress but there are ways to prepare for the worst.
Episode 83: In this episode of Critical Thinking - Bug Bounty Podcast Joel and Justin are brainstorming new features and improvements for Caido, such as the implementation of a 403 bypassing workflow, a text expander, Tracing Cookies, and more. Follow us on twitter at: https://twitter.com/ctbbpodcast We're new to this podcasting…
Instead of manually modifying debug functions, Matan sets log points to capture function arguments, providing more visibility and simplifying the process. Here's how to add log points with a right-click in DevTools.