AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Critical Thinking - Bug Bounty Podcast
Episode 69: Johan Carlsson - 3 Month Check-in on Full-time Bug Bounty.
May 2, 2024
Johan Carlsson, a dedicated bug bounty hunter, shares his journey transitioning to full-time bug hunting. He discusses the thrill of discovering vulnerabilities like a CSP bypass in GitHub and a critical flaw in GitLab. Johan highlights his focus on complex bug types like ReDoS and OAuth, emphasizing the unpredictability that accompanies bug hunting. He also offers insights into balancing personal life with his bug bounty career, navigating financial challenges, and the importance of community support in this unique profession.
01:49:04
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Johan Carlsson discusses his transition to full-time bug bounty hunting, emphasizing the blend of previous technical skills and newfound security focus.
- He shares insights on identifying complex vulnerabilities, particularly a CSP bypass, highlighting the importance of understanding security policies in web applications.
Deep dives
Introduction to CSP Evaluator and Tools
The episode discusses the CSP Evaluator, a tool aimed at assessing the security posture of Content Security Policies. New features in Nuclei 3.2, particularly for authenticated scanning and advanced fuzzing support, are highlighted. Authenticated scanning streamlines the process by automatically managing login templates, which enhances coverage for penetration testing. Advanced fuzzing expands the potential to identify vulnerabilities by allowing fuzzing within various data structures, headers, and cookies.
Get the Snipd
podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any
moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share
& Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered
podcast player
Listen to all your favourite podcasts with AI-powered features
Discover
highlights
Listen to the best highlights from the podcasts you love and dive into the full episode