Best Pod Prod Podcasts (2025)

1
Episode 141: Hacking the Pod - Google Docs 0-day & React CreateElement Exploits with Nick Copi (7urb0) 1:23:31

Play Pause

5d ago1:23:31

1:23:31

Episode 141: In this episode of Critical Thinking - Bug Bounty Podcast Justin sits down with Nick Copi to talk about CSPT, React, CSS Injections and how Nick hacked the pod. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shoutout to YTCracker …

1
Episode 140: Crit Research Lab Update & Client-Side Tricks Galore 57:41

12d ago57:41

57:41

Episode 140: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph give an update from The Crit Research Lab, as well as some writeups on postMessage vulnerabilities, Cookie Chaos, and more. Follow us on X at: https://x.com/ctbbpodcast Got any ideas and suggestions? Send us feedback at [email protected] Shoutout …

1
Episode 139: James Kettle - Pwning in Prod & How to do Web Security Research 2:21:51

19d ago2:21:51

2:21:51

Episode 139: In this episode of Critical Thinking - Bug Bounty Podcast Justin finally sits down with the great James Kettle to talk about HTTP Proxys, metagaming research, avoiding burnout, and why HTTP/1.1 must die! Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@critic…

1
Episode 138: Caido Tools and Workflows 22:39

26d ago22:39

22:39

Episode 138: In this episode of Critical Thinking - Bug Bounty Podcast We’re talking Caido tools and workflows. Justin gives us a list of some of the Caido tools that have caught his interest, as well as how he’s using them. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: inf…

1
Episode 137: How We Do AI-Assisted Whitebox Review, New CSPT Gadgets, and Tools from SLCyber 49:09

1M ago49:09

49:09

Episode 137: In this episode of Critical Thinking - Bug Bounty Podcast Justin Gardner and Joseph Thacker reunite to talk about AI Hacking Assistants, CSPT and cache deception, and a bunch of tools like ch.at, Slice, Ebka, and more. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback he…

1
Episode 136: Hacking Cluely, AI Prod Sec, and How To Not Get Sued with Jack Cable 50:53

1M ago50:53

50:53

Episode 136: In this episode of Critical Thinking - Bug Bounty Podcast, Joseph Thacker sits down with Jack Cable to get the scoop on a significant bug in Cluely’s desktop application, as well as the resulting drama. They also talk about Jack’s background in government cybersecurity initiatives, and the legal risks faced by security researchers. Fol…

1
Episode 135: Akamai's Ryan Barnett on WAFs, Unicode Confusables, and Triage Stories 1:26:21

2M ago1:26:21

1:26:21

Episode 135: In this episode of Critical Thinking - Bug Bounty Podcast Justin sits down with Ryan Barnett for a deep dive on WAFs. We also recap his Exploiting Unicode Normalization talk from DEFCON, and get his perspective on bug hunting from his time at Akamai. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel…

1
Episode 134: XBOW - AI Hacking Agent and Human in the Loop with Diego Djurado 1:53:35

2M ago1:53:35

1:53:35

Episode 134: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Diego Djurado to give us the scoop on XBOW. We cover a little about its architecture and approach to hunting, the challenges with hallucinations, and the future of AI in the BB landscape. Diego also shares some of his own hacking journey and successes in the Amba…

1
Episode 133: Building Hacker Communities - Bug Bounty Village, getDisclosed, and the LHE Squad 1:16:12

2M ago1:16:12

1:16:12

Episode 133: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Harley and Ari from H1 to talk some about community management roles within Bug Bounty, as well as discuss the evolution of Bug Bounty Village at DEFCON, and what they’ve got in store this year. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and…

1
Episode 132: Archive Testing Methodology with Mathias Karlsson 1:49:32

2M ago1:49:32

1:49:32

Episode 132: In this episode of Critical Thinking - Bug Bounty Podcast, Justin Gardner is joined by Mathias Karlsson to discuss vulnerabilities associated with archives. They talk about his new tool, Archive Alchemist, and explore topics like the significance of Unicode paths, symlinks, and TAR before they end up talking about Charsets again.. Foll…

1
Episode 131: SL Cyber Writeups, Bug Bounty Metastrategy, and Orphaned Github Commits 50:36

3M ago50:36

50:36

Episode 131: In this episode of Critical Thinking - Bug Bounty Podcast we're covering Christmas in July with several banger articles from Searchlight Cyber, as well as covering things like Raycast for Windows, Third-Person prompting, and touch on the recent McDonalds Leak Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggesti…

1
Episode 130: Minecraft Hacks to Google Hacking Star - Valentino 1:08:26

3M ago1:08:26

1:08:26

Episode 130: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by Valentino, who shares his journey from hacking Minecraft to becoming a Google hunter. He talks us through several bugs, including an HTML Sanitizer bypass and .NET deserialization, and highlights the hyper creative approaches he tends to employ. Follow us on …

1
Episode 129: Is this how Bug Bounty Ends? 36:14

3M ago36:14

36:14

Episode 129: In this episode of Critical Thinking - Bug Bounty Podcast we chat about the future of hack bots and human-AI collaboration, the challenges posed by tokenization, and the need for cybersecurity professionals to adapt to the evolving landscape of hacking in the age of AI Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas an…

1
Episode 128: New Research in Blind SSRF and Self-XSS, and How to Architect Source-code Review AI Bots 58:06

3M ago58:06

58:06

Episode 128: In this episode of Critical Thinking - Bug Bounty Podcast we talking Blind SSRF and Self-XSS, as well as Reversing massive minified JS with AI and a wild Google Logo Ligature Bug Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shou…

1
Episode 127: Drama, PDF as JS Chaos, Bounty Profile Apps, And More 1:07:25

3M ago1:07:25

1:07:25

Episode 127: In this episode of Critical Thinking - Bug Bounty Podcast we address some recent bug bounty controversy before jumping into a slew of news items Follow us on X Shoutout to YTCracker for the awesome intro music! Today's Sponsor: Adobe ====== This Week In Bug Bounty ====== Hackers Guide to Google dorking YesWeCaido New Dojo Challenge Sma…

1
Episode 126: Hacking AI Series: Vulnus ex Machina - Part 3 38:32

4M ago38:32

38:32

Episode 126: In this episode of Critical Thinking - Bug Bounty Podcast we wrap up Rez0’s AI miniseries ‘Vulnus Ex Machina’. Part 3 includes a showcase of AI Vulns that Rez0 himself has found, and how much they paid out. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@cri…

1
Episode 125: How to Win Live Hacking Events 47:04

4M ago47:04

47:04

Episode 125: In this episode of Critical Thinking - Bug Bounty Podcast Justin shares insights on how to succeed at live hacking events. We cover pre-event preparations, challenges of collaboration, on-site strategies, and the importance of maintaining a healthy mindset throughout the entire process. Follow us on twitter at: https://x.com/ctbbpodcas…

1
Episode 124: Bug Bounty Lifestyle = Less Hacking Time? 45:26

4M ago45:26

45:26

Episode 124: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph cover some news from around the community, hitting on Joseph’s Anthropic safety testing, Justin’s guest appearance on For Crying Out Cloud, and several fascinating tweets. Then they have a quick Full-time Bug Bounty check-in. Follow us on twitter at: https://x.…

1
Episode 123: Hacking AI Series: Vulnus ex Machina - Part 2 44:12

4M ago44:12

44:12

Episode 123: In this episode of Critical Thinking - Bug Bounty Podcast we’re back with part 2 of Rez0’s miniseries. Today we talk about mastering Prompt Injection, taxonomy of impact, and both triggering traditional Vulns and exploiting AI-specific features. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free…

1
Episode 122: We Won Google's AI Hacking Event in Tokyo - Main Takeaways 1:45:30

5M ago1:45:30

1:45:30

Episode 122: In this episode of Critical Thinking - Bug Bounty Podcast your boys are MVH winners! First we’re joined by Zak, to discuss the Google LHE as well as surprising us with a bug of his own! Then, we sit down with Lupin and Monke for a winners roundtable and retrospective of the event. Follow us on twitter at: https://x.com/ctbbpodcast Got …

1
Episode 121: Slonser’s Image Injection 0-day -> ATO & New Caido Collab Plugin 57:27

5M ago57:27

57:27

Episode 121: In this episode of Critical Thinking - Bug Bounty Podcast we cover so much news and research that we ran out of room in the description... Follow us on X Shoutout to YTCracker for the awesome intro music! ====== Links ====== Follow Rhynorater and Rez0 on X: ====== Ways to Support CTBBPodcast ====== Hop on the CTBB Discord! We also have…

1
Episode 120: SpaceRaccoon - From Day Zero to Zero Day 1:36:57

5M ago1:36:57

1:36:57

Episode 120: In this episode of Critical Thinking - Bug Bounty Podcast Justin Gardner welcomes Eugene to talk (aka fanboy) about his new book, 'From Day Zero to Zero Day.' We walk through what to expect in each chapter, including Binary Analysis, Source and Sink Discovery, and Fuzzing everything.Then we give listeners a special deal on the book. Fo…

1
Episode 119: Abusing Iframes from a client-side hacker 33:54

6M ago33:54

33:54

Episode 119: In this episode of Critical Thinking - Bug Bounty Podcast Justin does a mini deep dive into the world of iframes, starting with why they’re significant, their attributes, and how to attack them. CORRECTION: Some of my comments on the latest episode of the pod were woefully inaccurate about the `csp` attribute of an iframe. Def should h…

1
Episode 118: Hacking Happy Hour: 0days on Tap and SQLi Shots 58:29

6M ago58:29

58:29

Episode 118: In this episode of Critical Thinking - Bug Bounty Podcast we cover a host of news, including clientside tidbits, “Credentialless” iframes, prototype pollution, and what constitutes a polyglot in llms.txt. Follow us on X Shoutout to YTCracker for the awesome intro music! ====== Links ====== Follow Rhynorater and Rez0 on X ====== Ways to…

1
Episode 117: Hacking AI Series: Vulnus ex Machina - Part 1 32:20

6M ago32:20

32:20

Episode 117: In this episode of Critical Thinking - Bug Bounty Podcast Joseph introduces Vulus Ex Machina: A 3-part mini-series on hacking AI applications. In this part, he lays the groundwork and focuses on AI reconnaissance. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: i…

1
Episode 116: Auth Bypasses and Google VRP Writeups 26:48

6M ago26:48

26:48

Episode 116: In this episode of Critical Thinking - Bug Bounty Podcast Justin gives a quick rundown of Portswigger’s SAML Roulette writeup, as well as some Google VRP reports, and a Next.js middleware exploit. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthink…

1
Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi) 1:40:58

6M ago1:40:58

1:40:58

Episode 115: In this episode of Critical Thinking - Bug Bounty Podcast Justin and So Sakaguchi sit down to walk through some recent bugs, before having a live mentorship session. They also talk about Reflector, and finish up by doing a bonus podcast segment in Japanese! Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestion…

1
Episode 114: Single Page Application Hacking Playbook 1:22:25

7M ago1:22:25

1:22:25

Episode 114: In this episode of Critical Thinking - Bug Bounty Podcast we’re diving into SPA and how to attack them.We also cover a host of news items, including some bug write-ups, AI updates, and a new tool called Hackadvisor. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here:…

1
Episode 113: Best Technical Takeaways from Portswigger Top 10 2024 1:29:19

7M ago1:29:19

1:29:19

Episode 113: In this episode of Critical Thinking - Bug Bounty Podcast we’re breaking down the Portswigger Top 10 from 2024. There’s some bangers in here! Follow us on X at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shoutout to YTCracker for the awesome intro mus…

1
Episode 112: Interview with Ciarán Cotter (MonkeHack) - Critical Lab Researcher and Full-time Hunter 1:07:37

7M ago1:07:37

1:07:37

Episode 112: In this episode of Critical Thinking - Bug Bounty Podcast Joseph Thacker is joined by Ciarán Cotter (Monke) to share his bug hunting journey and give us the rundown on some recent client-side and server-side bugs. Then they discuss WebSockets, SaaS security, and cover some AI news including Grok 3, Nuclei -AI Flag, and some articles by…

1
Episode 111: How to Bypass DOMPurify in Bug Bounty with Kevin Mizu 1:49:15

7M ago1:49:15

1:49:15

Episode 111: In this episode of Critical Thinking - Bug Bounty Podcast Justin interviews Kevin Mizu to showcase his knowledge regarding DOMPurify and its misconfigurations. We walk through some of Kevin’s research, highlighting things like Dangerous allow-lists and URI Attributes, DOMPurify hooks, node manipulation, and DOM Clobbering. Follow us on…

1
Episode 110: Oauth Gadget Correlation and Common Attacks 49:41

8M ago49:41

49:41

Episode 110: In this episode of Critical Thinking - Bug Bounty Podcast we hit some quick news items including a DOMPurify 3.2.3 Bypass, O3 mini updates, and a cool postLogger Chrome Extension. Then, we hone in on OAuth vulnerabilities, API keys, and innovative techniques hackers use to exploit these systems. Follow us on twitter at: https://x.com/c…

1
Episode 109: Creative Recon - Alternative Techniques 1:01:42

8M ago1:01:42

1:01:42

Episode 109: In this episode of Critical Thinking - Bug Bounty Podcast we start off with a quick recap of some of the DeepSeek Drama that’s been going down, and discuss AI in CAPTCHA and 2FA as well. Then we switch to cover some other news before settling in to talk about Alternative Recon Techniques Follow us on twitter at: https://x.com/ctbbpodca…

1
Episode 108: How to Hack Salesforce, ServiceNow, and Other SaaS Products With Aaron Costello 1:31:08

8M ago1:31:08

1:31:08

Episode 108: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph bring on Aaron Costello to discuss SaaS security and misconfigurations as a bug class. He also gives some in-depth examples from Salesforce, ServiceNow, and Power Pages. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free…

1
Episode 107: Bypassing Cross-Origin Browser Headers 1:06:17

8M ago1:06:17

1:06:17

Episode 107: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph are tackling the subject of cross-origin security headers. They also cover some news items including Google’s OAuth login flaw, RAINK, and gift card hacking. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us …

1
Episode 106: Announcing our new cohost... 58:10

9M ago58:10

58:10

Episode 106: In this episode of Critical Thinking - Bug Bounty Podcast we are pleased to announce our new co-host of the podcast: Joseph Thacker Aka Rez0! We discuss Joseph's transition to full-time bug bounty hunting, his goals, and what he’s looking forward to bringing to the pod. We also cover some news items including doubleclickjacking, charac…

1
Episode 105: Best Critical Thinking Moments from 2024 2:17:47

9M ago2:17:47

2:17:47

Episode 105: In this episode of Critical Thinking - Bug Bounty Podcast we're back with another Best-of episode recapping some of our top moments of 2024. Follow us on twitter at: @ctbbpodcast Ssend us any feedback here: [email protected] Shoutout to YTCracker for the awesome intro music! ------ Links ------ Follow your hosts Rhynorate…

1
tied boss 1:02:18

9M ago1:02:18

1:02:18

tied boss

1
Episode 104: 2024 Hacker Stats & 2025 Goals 29:00

9M ago29:00

29:00

Episode 104: In this episode of Critical Thinking - Bug Bounty Podcast Justin reflects upon the past year and walks through some of the bug bounty goals he had for 2024, and how he feels like he did. Then he sets some goals for 2025, as well as some exciting CT news for the coming year. Follow us on twitter at: @ctbbpodcast We're new to this podcas…

1
Episode 103: Getting ANSI about Unicode Normalization 1:00:30

9M ago1:00:30

1:00:30

Episode 103: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph delve into the vulnerabilities associated with ANSI codes and large language models (LLMs), as well as talk through some new research and the value of micro-blogging in general. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel f…

1
ping 1:26:23

9M ago1:26:23

1:26:23

In this episode, we return from our brief hiatus to discuss the new Superman trailer as well as what we thought about Beetlejuice Beetlejuice. don' t mind the opening well fix it i promise lol

1
Episode 102: Building Web Hacking Micro Agents with Jason Haddix 1:02:49

10M ago1:02:49

1:02:49

Episode 102: In this episode of Critical Thinking - Bug Bounty Podcast Justin grabs Jason Haddix to help brainstorm the concept of AI micro-agents in hacking, particularly in terms of web fuzzing, WAF bypasses, report writing, and more.They discuss the importance of contextual knowledge, the cost implications, and the strengths of different LLM Mod…

1
Episode 101: CTBB Hijacked: Rez0__ on AI Attack Vectors with Johann Rehberger 51:24

10M ago51:24

51:24

Episode 101: In this episode of Critical Thinking - Bug Bounty Podcast we’ve been hijacked! Rez0 takes control of this episode, and sits down with Johann Rehberger to discuss the intricacies of AI application vulnerabilities. They talk through the importance of understanding system prompts, and various obfuscation techniques used to bypass security…

1
Ep 100 - 8 Fav Bugs of 2024, Farewell Joel, Hello Shift - Cursor of Hacking 1:41:40

10M ago1:41:40

1:41:40

Episode 100: In this episode of Critical Thinking - Bug Bounty Podcast we have a mixed bag. We celebrate 100 episodes of Critical Thinking, but also bid farewell to Joel, who will be leaving the show as a co-host, but returning as guest. Then we hear from a bunch of friends about their 'best bug of the year', before capping the episode with the ann…

1
FUTURE ME brought you by the letter W 2:18:24

10M ago2:18:24

2:18:24

on this episode we start with a story from dr sam as she tales of her dating life before segueing into drake and his suits as well as other topics such as can you be addicted to video games so strap in for this audio adventure noisemakers and enjoy

1
Episode 99: Back to the Basics - Web Fundamental to 100k a Year in Bug Bounty 1:42:54

10M ago1:42:54

1:42:54

Episode 99: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Roni dissect an old thread of Justin's talking about how best to start bug bounty with the goal of making $100k in the first year. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinking…

1
Bad Kitty 2:00:44

10M ago2:00:44

2:00:44

on this episode we discuss some of the fall out of the new kendrick album as well as getting trina's take and special guest Rahsaan reuturns as well as zodiac signs and the strains we would create enjoy NOISEMAKERS

1
emergency pod for dot 1:18:14

10M ago1:18:14

1:18:14

NOISEMAKERS!!!!!!!! WE HAVE AN EMERGENCY KENDRICK JUST DROPPED HIS NEW ALBUM GNX

1
Episode 98: Team 82 Sharon Brizinov - The Live Hacking Polymath 1:43:57

10M ago1:43:57

1:43:57

Episode 98: In this episode of Critical Thinking - Bug Bounty Podcast Justin Gardner sits down with Sharon,to discuss his journey from early iOS development to leading a research team at Claroty. They address the differences between HackerOne and Pwn2Own, and talk through some intricacies of IoT security, and some less common IoT attack surfaces. F…

1
Z Kittles 2:01:39

11M ago2:01:39

2:01:39

fellow NOISEMAKERS this episode is brought to you by the letter Z for reasons that you can only discover by listening to this audio adventure