Episode 183: PortSwigger Research Impossible XSS SOLVED

Episode 183: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Brandyn talk about looking at AI features like tech features, Using AI to leak private repos, and solving PortSwigger’s Unexploitable XSS labs

Follow us on twitter at: x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout toYTCracker (twitter.com/realytcracker) for the awesome intro music!

====== Links ======
Follow your hosts Rhynorater, rez0 and gr3pme on X:
x.com/Rhynorater
x.com/rez0__
x.com/gr3pme

Critical Research Lab:
lab.ctbb.show

Need a Pentest? We just launched CTBB Pentests!
pentest.ctbb.show

Hack full time? Check out the Full-Time Hunter’s Guild!
ctbb.show/fthg

====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at ctbb.show/merch!

Sponsored by ThreatLocker - Zero Trust Network Access
criticalthinkingpodcast.io/tl-ztna

====== This Week in Bug Bounty ======
How LLMs are changing Bug Bounty Interview series
yeswehack.com/fr/community/llms-bug-bounty-int…
yeswehack.com/fr/community/llms-bug-bounty-int…

yeswehack.com/fr/community/llms-bug-bounty-int…

====== Resources ======
$15k - CSPT to full account takeover, then 2FA bypass via the prototype chain
whoareme.com/blog/cspt-account-takeover-2fa-by…

Two Bypasses for Chrome’s Sanitizer API
slcyber.io/research-center/two-bypasses-for-ch…

Documenting the impossible: Unexploitable XSS labs
portswigger.net/research/documenting-the-impos…

GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos
noma.security/blog/gitlost-how-we-tricked-gith…

Chaining Razor SSTI into RCE via Reflection and Runtime Strings
phsi.se/posts/chaining-razor-ssti-into-rce-via…

====== Timestamps ======
(00:00:00) Introduction
(00:06:07) AI Features Are Just Tech Features
(00:20:02) CSPT to full Account Takeover & Other Chains
(00:35:27) Sanitizer API for Chrome and Firefox
(00:46:57) Solving PortSwigger's Impossible Lab & GitLost
(01:01:19) SSTI into RCE via Reflection