Episode 175: Rhyno’s Hackbot Setup, Sick Bugs, and ZDI Drama

Episode 175: In this episode of Critical Thinking - Bug Bounty Podcast we’re comparing Hackbot setups and results. We also talk about some of the recent ZDI drama, as well as the importance of freaking beautiful POCs

Follow us on twitter at: x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout toYTCracker (twitter.com/realytcracker) for the awesome intro music!

====== Links ======
Follow your hosts Rhynorater, rez0 and gr3pme on X:
x.com/Rhynorater
x.com/rez0__
x.com/gr3pme

Critical Research Lab:
lab.ctbb.show

Need a Pentest? We just launched CTBB Pentests!
pentest.ctbb.show

Hack full time? Check out the Full-Time Hunter’s Guild!
ctbb.show/fthg

====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at ctbb.show/merch!

Sponsored by ThreatLocker - Zero Trust Cloud Access
criticalthinkingpodcast.io/tl-ztca

====== Resources ======
Another day, another universal linux LPE
x.com/v12sec/status/2054491454064746629

ZDI Drama
x.com/ryotkak/status/2052881664909660521

Orange Tsai Bug on Edge
x.com/thezdi/status/2054868495888777266

Chompie's Exploit in NV Container Toolkit
x.com/chompie1337/status/2054882193055601140

GitHub Security April bug bounty stats
x.com/GitHubSecurity/status/2054274356403138932

====== Timestamps ======
(00:00:00) Introduction
(00:02:14) q param prompt injection & Mobile CSPT
(00:14:17) Admin API Key MegaCrit
(00:17:13) Hackbots
(00:37:10) Pretty POCs and ZDI Drama
(00:44:48) GitHub Security April Stats