Critical Thinking - Bug Bounty Podcast
Technology

Critical Thinking - Bug Bounty Podcast

by Justin Gardner (Rhynorater), Joseph Thacker (Rez0), & Brandyn Murtagh (gr3pme)

A "by Hackers for Hackers" podcast focused on technical content ranging from bug bounty tips, to write-up explanations, to the latest hacking techniques.

100 episodes
EN language
All Episodes
1
Episode 165: Protobuf Hacking, AI-Powered Bug Hunting, and Self-Improving Claude Workflows
44:23 Mar 12, 2026
2
Episode 164: Tommy DeVoss: From Black Hat to Bug Bounty LEGEND
1:11:56 Mar 5, 2026
3
Episode 163: Best Technical Takeaways from Portswigger Top 10 2025
1:08:23 Feb 26, 2026
4
Episode 162: HackerOne Training AI on Bug Bounty Data?
53:22 Feb 19, 2026
5
Episode 161: Cross-Consumer Attacks & DTMF Tone Exfil
24:42 Feb 12, 2026
6
Episode 160: Cloudflare Zero-days & Mail Unsubscribing for XSS
45:04 Feb 5, 2026
7
Episode 159: Avoiding Downgrades on Google Cloud VRP with Cote and Darby Hopkins
1:46:50 Jan 29, 2026
8
Episode 159: Avoiding Downgrades on Google Cloud VRP with Cote and Darby Hopkins
1:46:50 Jan 29, 2026
9
Episode 158: 10hr Marathon Hack-Along Recap + $300k Client-side Bugs
58:30 Jan 22, 2026
10
Episode 158: 10hr Marathon Hack-Along Recap + $300k Client-side Bugs
58:30 Jan 22, 2026
11
Episode 157: Crushing Pwn2Own & H1 with Kernel Driver Exploits
1:34:58 Jan 15, 2026
12
Episode 156: Chill AMA from bugbounty.forum
1:23:07 Jan 8, 2026
13
Episode 155: 2025 Hacker Stats & 2026 Goals
1:32:16 Jan 1, 2026
14
Episode 154: Starting a Pentesting Company on Top of Bug Bounty
41:28 Dec 25, 2025
15
Episode 153: Hacking the Robots of the Future: Hardware, AI, and Bug Bounties with Matt Brown
1:16:50 Dec 18, 2025
16
Episode 152: GeminiJack and Agentic Security with Sasi Levi
1:21:36 Dec 11, 2025
17
Episode 151: Client-side Advanced Topics
1:07:26 Dec 4, 2025
18
Episode 150: ASP.NET MVC Patterns, Popping Oracle Identity, and Esoteric Subdomain Enumeration
57:20 Nov 27, 2025
19
Episode 149: DEFCON Debrief: AI Vulns, Unicode Weirdness, and Wild Vulnerability Chains
1:02:33 Nov 20, 2025
20
Episode 148: MCP Hacking Guide
32:26 Nov 13, 2025
21
Episode 147: Stupid Simple Hacking Workflow Tips
58:48 Nov 6, 2025
22
Episode 146: Hacking Horror Stories
1:50:38 Oct 30, 2025
23
Episode 145: Gr3pme's Secret: Bug Bounty Note Taking Methodology
28:17 Oct 23, 2025
24
Episode 144: Google’s Top AI Hackers: Busfactor and Monke
52:40 Oct 16, 2025
25
Episode 143: New Cohost + Client-Side Gadgets, LHE Meta — Instant Global Admin in Entra!
1:04:23 Oct 9, 2025
26
Episode 142: Gr3pme's Full-Time Hunting Journey Update, Insane AI research, And Some Light News
54:50 Oct 2, 2025
27
Episode 141: Hacking the Pod - Google Docs 0-day & React CreateElement Exploits with Nick Copi (7urb0)
1:23:31 Sep 25, 2025
28
Episode 140: Crit Research Lab Update & Client-Side Tricks Galore
57:41 Sep 18, 2025
29
Episode 139: James Kettle - Pwning in Prod & How to do Web Security Research
2:21:51 Sep 11, 2025
30
Episode 138: Caido Tools and Workflows
22:39 Sep 4, 2025
31
Episode 137: How We Do AI-Assisted Whitebox Review, New CSPT Gadgets, and Tools from SLCyber
49:09 Aug 28, 2025
32
Episode 136: Hacking Cluely, AI Prod Sec, and How To Not Get Sued with Jack Cable
50:53 Aug 21, 2025
33
Episode 135: Akamai's Ryan Barnett on WAFs, Unicode Confusables, and Triage Stories
1:26:21 Aug 14, 2025
34
Episode 134: XBOW - AI Hacking Agent and Human in the Loop with Diego Djurado
1:53:35 Aug 4, 2025
35
Episode 133: Building Hacker Communities - Bug Bounty Village, getDisclosed, and the LHE Squad
1:16:12 Jul 31, 2025
36
Episode 132: Archive Testing Methodology with Mathias Karlsson
1:49:32 Jul 24, 2025
37
Episode 131: SL Cyber Writeups, Bug Bounty Metastrategy, and Orphaned Github Commits
50:36 Jul 17, 2025
38
Episode 130: Minecraft Hacks to Google Hacking Star - Valentino
1:08:26 Jul 10, 2025
39
Episode 129: Is this how Bug Bounty Ends?
36:14 Jul 3, 2025
40
Episode 128: New Research in Blind SSRF and Self-XSS, and How to Architect Source-code Review AI Bots
58:06 Jun 26, 2025
41
Episode 127: Drama, PDF as JS Chaos, Bounty Profile Apps, And More
1:07:25 Jun 19, 2025
42
Episode 126: Hacking AI Series: Vulnus ex Machina - Part 3
38:32 Jun 12, 2025
43
Episode 125: How to Win Live Hacking Events
47:04 Jun 5, 2025
44
Episode 124: Bug Bounty Lifestyle = Less Hacking Time?
45:26 May 29, 2025
45
Episode 123: Hacking AI Series: Vulnus ex Machina - Part 2
44:12 May 22, 2025
46
Episode 122: We Won Google's AI Hacking Event in Tokyo - Main Takeaways
1:45:30 May 15, 2025
47
Episode 121: Slonser’s Image Injection 0-day -> ATO & New Caido Collab Plugin
57:27 May 8, 2025
48
Episode 120: SpaceRaccoon - From Day Zero to Zero Day
1:36:57 May 1, 2025
49
Episode 119: Abusing Iframes from a client-side hacker
33:54 Apr 17, 2025
50
Episode 118: Hacking Happy Hour: 0days on Tap and SQLi Shots
58:29 Apr 10, 2025
Select an episode
0:00 0:00