Critical Thinking - Bug Bounty Podcast

Episode 59: Bug Bounty Gadget Hunting & Hacker's Intuition

9 snips
Feb 22, 2024
Exploring gadgets for web pen testing and hacking intuition, discussing HTML injection, image injection, CRLF injection, and leaking window location. Emphasizing the importance of bug bounty programs, exploring open redirect vulnerabilities, client-side path traversal, and ID oracle. Delving into the risks of cache deception, local storage poisoning, and the utilization of 'gadgets' to escalate hacking impact.
Ask episode
AI Snips
Chapters
Transcript
Episode notes
ADVICE

Buy Kaido Now

  • Get Kaido now before the price increases, potentially soon after new features like JS/CSS customization and automated workflows are released.
  • Use the CTBBPODCAST code for an extra discount.
ANECDOTE

Kaido in Action

  • Justin used Kaido exclusively at the last live hacking event, proving its usability.
  • He provided feedback to the Kaido team, which was quickly implemented.
ADVICE

Learn JavaScript

  • Learn JavaScript for web hacking due to its versatility in client-side and server-side contexts.
  • This is especially relevant with Kaido adopting JavaScript for plugins.
Get the Snipd Podcast app to discover more snips from this episode
Get the app