Search a title or topic

Over 20 million podcasts, powered by 

Player FM logo
Artwork

Content provided by Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0). All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0) or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Player FM - Podcast App
Go offline with the Player FM app!

Episode 139: James Kettle - Pwning in Prod & How to do Web Security Research

2:21:51
 
Share
 

Manage episode 505670614 series 3435922
Content provided by Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0). All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0) or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Episode 139: In this episode of Critical Thinking - Bug Bounty Podcast Justin finally sits down with the great James Kettle to talk about HTTP Proxys, metagaming research, avoiding burnout, and why HTTP/1.1 must die!

Follow us on twitter at: https://x.com/ctbbpodcast

Got any ideas and suggestions? Feel free to send us any feedback here: [email protected]

Shoutout to YTCracker for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater and Rez0 on Twitter:

https://x.com/Rhynorater

https://x.com/rez0__

====== Ways to Support CTBBPodcast ======

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at https://ctbb.show/merch!

Today’s Guest: https://x.com/albinowax

https://jameskettle.com

====== This Week in Bug Bounty ======

Building an Android Bug Bounty lab

Mobile Hacking Toolkit

====== Resources ======

CVE-2022-22720

So you want to be a web security researcher?

Hunting Evasive Vulnerabilities: Finding Flaws That Others Miss by James Kettle

HTTP/1.1 Must Die! The Desync Endgame

Practical HTTP Host header attacks

====== Timestamps ======

(00:00:00) Introduction

(00:05:01) Apache MITM-powered pause-based client-side desync

(00:15:33) HTTP Proxys and Burp Suite HTTP/2 in Repeater

(00:24:52) AI intagrations, life structure, and avoiding burnout

(00:35:23) Client-side to server-side progression

(00:47:39) The 'metagame' of security research

(01:29:43) Host Header Attacks & HTTP/1.1 Must Die!

(02:02:34) Is HTTP/2 the solution?

  continue reading

139 episodes

Artwork
iconShare
 
Manage episode 505670614 series 3435922
Content provided by Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0). All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Justin Gardner (Rhynorater) & Joseph Thacker (Rez0), Justin Gardner (Rhynorater), and Joseph Thacker (Rez0) or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

Episode 139: In this episode of Critical Thinking - Bug Bounty Podcast Justin finally sits down with the great James Kettle to talk about HTTP Proxys, metagaming research, avoiding burnout, and why HTTP/1.1 must die!

Follow us on twitter at: https://x.com/ctbbpodcast

Got any ideas and suggestions? Feel free to send us any feedback here: [email protected]

Shoutout to YTCracker for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater and Rez0 on Twitter:

https://x.com/Rhynorater

https://x.com/rez0__

====== Ways to Support CTBBPodcast ======

Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at https://ctbb.show/merch!

Today’s Guest: https://x.com/albinowax

https://jameskettle.com

====== This Week in Bug Bounty ======

Building an Android Bug Bounty lab

Mobile Hacking Toolkit

====== Resources ======

CVE-2022-22720

So you want to be a web security researcher?

Hunting Evasive Vulnerabilities: Finding Flaws That Others Miss by James Kettle

HTTP/1.1 Must Die! The Desync Endgame

Practical HTTP Host header attacks

====== Timestamps ======

(00:00:00) Introduction

(00:05:01) Apache MITM-powered pause-based client-side desync

(00:15:33) HTTP Proxys and Burp Suite HTTP/2 in Repeater

(00:24:52) AI intagrations, life structure, and avoiding burnout

(00:35:23) Client-side to server-side progression

(00:47:39) The 'metagame' of security research

(01:29:43) Host Header Attacks & HTTP/1.1 Must Die!

(02:02:34) Is HTTP/2 the solution?

  continue reading

139 episodes

Tất cả các tập

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright
Listen to this show while you explore
Play