Episode 193: Browser Logic Errors & XS-Leaks with Jorian Woltjer

Episode 193: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Jorian Woltjer to talk through his Bug Bounty journey and all the crazy research he’s done for the Critical Thinking Lab.

Follow us on twitter at: x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout toYTCracker (twitter.com/realytcracker) for the awesome intro music!

====== Links ======
Follow your hosts Rhynorater, rez0 and gr3pme on X:
x.com/Rhynorater
x.com/rez0__
x.com/gr3pme

Critical Research Lab:
lab.ctbb.show

Need a Pentest? We just launched CTBB Pentests!
pentest.ctbb.show

Hack full time? Check out the Full-Time Hunter’s Guild!
ctbb.show/fthg

====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at ctbb.show/merch!

====== Resources ======
Cache key injection: Smuggling poison through the door
yeswehack.com/lab/research-cache-key-injection

====== Resources ======
XS-Leaks
xsleaks.dev

Solving an ORB mystery
lab.ctbb.show/research/solving-an-orb-mystery

Research Review #24: Solving an ORB mystery (J0R1AN)
youtube.com/watch?v=TpXccQbOb48

Stopping Redirects
lab.ctbb.show/research/stopping-redirects

Ethical Hacker Groep Nederland
youtube.com/playlist?list=PL-cT3O--POR-ElvSufp…

====== Timestamps ======
(00:00:00) Introduction
(00:04:19) CTFd status code XS-Leak
(00:18:05) Jorian's Journey & Solving an ORB mystery
(00:33:39) Stopping Redirects
(00:58:55) DNS Rebinding in the browser
(01:08:47) Popunder: weak password prompt
(01:24:33) Declarative partial updates