Episode 127: Drama, PDF as JS Chaos, Bounty Profile Apps, And More

Episode 127: In this episode of Critical Thinking - Bug Bounty Podcast we address some recent bug bounty controversy before jumping into a slew of news items
Follow us on X (x.com/ctbbpodcast)
Shoutout toYTCracker (twitter.com/realytcracker) for the awesome intro music!
Today's Sponsor: Adobe (hackerone.com/adobe)
====== This Week In Bug Bounty ======
Hackers Guide to Google dorking (yeswehack.com/learn-bug-bounty/recon-hackers-g…)
YesWeCaido (yeswehack.com/learn-bug-bounty/yeswecaido-plug…)
New Dojo Challenge (dojo-yeswehack.com/challenge-of-the-month/dojo…?)
Smart Contract BB tips (hackerone.com/blog/smart-contracts-common-vuln…)
Red Team AAS (bugcrowd.com/blog/introducing-bugcrowd-red-tea…)
====== Resources ======
Disclosed (getdisclosed.com)
PDF csp bypass (x.com/xssdoctor/status/1932953259339083929)
Bypassing File Upload Restrictions To Exploit Client-Side Path Traversal (blog.doyensec.com/2025/01/09/cspt-file-upload.…)
OBS WebSocket to RCE (jorianwoltjer.com/blog/p/research/obs-websocke…)
Time in a bottle (or knapsack) (sensecurity.io/time-in-a-bottle-or-knapsack)
How to Differentiate Yourself as a Bug Bounty Hunter (youtube.com/watch?v=WTH6f0R7uzo)
Disclosed. Online (disclosedonline.com)
hacked-in (hackedin.net)
‘EchoLeak’ (aim.security/lp/aim-labs-echoleak-blogpost)
Piloting Edge Copilot (archive.codeblue.jp/2024/files/cb24_Piloting_E…)
Newtowner (github.com/assetnote/newtowner)
Tips for agent prompting (x.com/Jhaddix/status/1931834748793655539)
Firefox XSS vectors (x.com/garethheyes/status/1932066642026012716)
Tweet from Masato Kinugawa (x.com/kinugawamasato/status/1929635990316146899)
Chrome debug() function (x.com/J0R1AN/status/1933463155763560881)