Critical Thinking - Bug Bounty Podcast

Episode 18: Audit Code, Earn Bounties

May 11, 2023
Ask episode
Chapters
Transcript
Episode notes
1
Introduction
00:00 • 4min
2
How to Fix a Bug in Home Assistant
03:55 • 3min
3
Mabassically Source Code Analysis
06:35 • 2min
4
How to Overflow a Configuration File
08:23 • 2min
5
The Transition to Config File Injection
10:09 • 3min
6
How to Get the Most Out of Bug-Bound
12:50 • 3min
7
Curse and Dara on Cookie Bugs
16:00 • 2min
8
How to Find Crazy Bugs
18:19 • 2min
9
How to Find Weird Behaviors in a Bug
20:10 • 2min
10
How to Bypass PHP's RFCs
21:41 • 2min
11
The Sweet Spot of Hacking
23:42 • 2min
12
Chrome's New Features for Hackers
25:13 • 3min
13
How to Do Source Code Review in a Bug Bounty Context
27:59 • 2min
14
The Benefits of Using vs Code
30:09 • 4min
15
How to Use vs Code to Improve Your Productivity
34:12 • 3min
16
How to Use vs Code to Control Your Application
36:55 • 3min
17
How to Do Highlight in VS Code
39:58 • 3min
18
How to Get Access to Source Code as a Bug Bounty Hunter
42:35 • 3min
19
The Ethics of Security Research
45:11 • 2min
20
The Importance of Setting Your Own Boundaries
47:07 • 2min
21
How to Read Source Code in Python
48:49 • 3min
22
How to Decompile Python Code
51:33 • 2min
23
The Importance of Pulling Source Code
53:35 • 2min
24
How to Find Docker Containers for Rapid Deployment
55:17 • 2min
25
How to Audit Public Source Code Packages and Libraries
57:22 • 2min
26
How to Integrate Sources and Sinks Into a Report
59:05 • 4min
27
Working Within Constraints to Find Epic Bugs
01:03:26 • 4min