Episode 103: Getting ANSI about Unicode Normalization

Episode 103: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph delve into the vulnerabilities associated with ANSI codes and large language models (LLMs), as well as talk through some new research and the value of micro-blogging in general.
Follow us on twitter at:@ctbbpodcast (twitter.com/ctbbpodcast)
We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout toYTCracker (twitter.com/realytcracker) for the awesome intro music!
------ Ways to Support CTBBPodcast ------
Hop on the CTBB Discord (ctbb.show/discord)!
We offer Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.
Check out our new SWAG store (ctbb.show/swag)!
Join our Shift waitlist (shiftwaitlist.com)!
Today’s Sponsor - ThreatLocker. Check out their Elevation Control!criticalthinkingpodcast.io/tl-detecthttps://ww…
Resources
_json Juggling Attack (nastystereo.com/security/rails-_json-juggling-…)
Cross-Site POST Requests Without a Content-Type Header (nastystereo.com/security/cross-site-post-witho…)
Worst Fit (worst.fit/#)
Orange Tsai on Worst Fit (worst.fit/assets/EU-24-Tsai-WorstFit-Unveiling…)
Handling Cookies is a Minefield (grayduck.mn/2024/11/21/handling-cookies-is-a-m…)
Terminal DiLLMa (embracethered.com/blog/posts/2024/terminal-dil…)
XS-Leaking flags with CSS: A CTFd 0day (jorianwoltjer.com/blog/p/hacking/xs-leaking-fl…)
Hacking Back the AI-Hacker (arxiv.org/html/2410.20911v1?utm_source=danielm…)
Johann Computer use demo (embracethered.com/blog/posts/2024/claude-compu…)
How I Became The Most Valuable Hacker (douglas.day/2024/12/13/HowIBecameTheMostValuab…)
Timestamps
(00:00:00) Introduction
(00:01:39) _json Juggling Attack and Cross-Site POST Requests Without a Content-Type Header
(00:10:55) Worst Fit and Unicode Mapping
(00:20:08) Handling Cookies is a Minefield
(00:28:11) Terminal DiLLMa & CTFd 0day
(00:41:18) Hacking Back the AI-Hacker
(00:47:30) Becoming Most Valuable Hacker