Episode 23: Hacker Loadouts

Episode 23: Hacker Loadouts

Episode 23: In this episode of Critical Thinking - Bug Bounty Podcast, we delve into a different aspect of hardware - Our personal loadouts. We go through the equipment and gear we use to get our jobs done, and share stories about why we picked what we have. We also touch on live hacking events, the growing acceptance of white hat hacking, and some pretty cool news going on in the hacker world. Don't miss this episode packed with tips and strategies for both beginners and seasoned hackers alike!

Follow us on twitter at: @ctbbpodcast

We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker for the awesome intro music!

------ Links ------

Follow your hosts Rhynorater & Teknogeek on twitter:

https://twitter.com/0xteknogeek

https://twitter.com/rhynorater

Blog post on hacking root EPP servers

https://hackcompute.com/hacking-epp-servers/

Behind this Website:

https://github.com/jonkeegan/behind-this-website

Tweet about vRealize Network Insight: https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-20887/

Zoom's new vulnerability impact scoring system:

https://viss.zoom.com/specifications

Uplift Desks

https://www.upliftdesk.com/

Synergy

https://symless.com/synergy

Ahnestly chair reviews:

https://www.youtube.com/c/Ahnestly

Our producer’s new audio drama ‘Homicide at Heavensgate’

https://link.sentinelstudios.net/homicide

Timestamps:

(00:00:00) Introduction

(00:02:28) Navigating hacking events and imposter syndrome

(00:06:30) Blog post on hacking root EPP servers

(00:10:01) The growing acceptance of white-hat hacking

(00:12:25) Finding Website Owners and Contact Information

(00:16:45) VMware vRealize Network Insight CVEs and nginx reverse proxy bypass

(00:21:30) Zoom's new vulnerability impact scoring system

(00:27:24) The Importance of Analyzing Systemic Problems in Black Box Testing

(00:30:40) Documentation, Vulnerable by Design, and acceptable risk

(Start of main content)

(00:34:37) Leveling up your Hacker Setup

(00:37:13) The Importance of your body

(00:41:30) Investing in ergonomic equipment for computer work

(00:42:27) Standing Desks: Uplift Desk and DIY standing desk options

(00:46:00) Portable Tables: Flexible Workspace Solutions

(00:47:30) Monitor Setup

(00:54:40) Synergy: One keyboard and mouse across multiple devices

(00:57:20) Capture Card: Using it as a software display

(00:58:58) Keyboards and mice

(01:03:27) Using a Chromebook for lightweight hacking

(01:08:57) Chair Reviews: The Niche World of High-End Chairs

Jaksot(164)

Episode 116: Auth Bypasses and Google VRP Writeups

Episode 116: Auth Bypasses and Google VRP Writeups

Episode 116: In this episode of Critical Thinking - Bug Bounty Podcast Justin gives a quick rundown of Portswigger’s SAML Roulette writeup, as well as some Google VRP reports, and a Next.js middleware...

27 Maalis 202526min

Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi)

Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi)

Episode 115: In this episode of Critical Thinking - Bug Bounty Podcast Justin and So Sakaguchi sit down to walk through some recent bugs, before having a live mentorship session. They also talk about ...

20 Maalis 20251h 40min

Episode 114: Single Page Application Hacking Playbook

Episode 114: Single Page Application Hacking Playbook

Episode 114: In this episode of Critical Thinking - Bug Bounty Podcast we’re diving into SPA and how to attack them.We also cover a host of news items, including some bug write-ups, AI updates, and a ...

13 Maalis 20251h 22min

Episode 113: Best Technical Takeaways from Portswigger Top 10 2024

Episode 113: Best Technical Takeaways from Portswigger Top 10 2024

Episode 113: In this episode of Critical Thinking - Bug Bounty Podcast we’re breaking down the Portswigger Top 10 from 2024. There’s some bangers in here!Follow us on X at: https://x.com/ctbbpodcastGo...

6 Maalis 20251h 29min

Episode 112: Interview with Ciarán Cotter (MonkeHack) -  Critical Lab Researcher and Full-time Hunter

Episode 112: Interview with Ciarán Cotter (MonkeHack) - Critical Lab Researcher and Full-time Hunter

Episode 112: In this episode of Critical Thinking - Bug Bounty Podcast Joseph Thacker is joined by Ciarán Cotter (Monke) to share his bug hunting journey and give us the rundown on some recent client-...

27 Helmi 20251h 7min

Episode 111: How to Bypass DOMPurify in Bug Bounty with Kevin Mizu

Episode 111: How to Bypass DOMPurify in Bug Bounty with Kevin Mizu

Episode 111: In this episode of Critical Thinking - Bug Bounty Podcast Justin interviews Kevin Mizu to showcase his knowledge regarding DOMPurify and its misconfigurations. We walk through some of Kev...

20 Helmi 20251h 49min

Episode 110: Oauth Gadget Correlation and Common Attacks

Episode 110: Oauth Gadget Correlation and Common Attacks

Episode 110: In this episode of Critical Thinking - Bug Bounty Podcast we hit some quick news items including a DOMPurify 3.2.3 Bypass, O3 mini updates, and a cool postLogger Chrome Extension. Then, w...

13 Helmi 202549min

Episode 109: Creative Recon - Alternative Techniques

Episode 109: Creative Recon - Alternative Techniques

Episode 109: In this episode of Critical Thinking - Bug Bounty Podcast we start off with a quick recap of some of the DeepSeek Drama that’s been going down, and discuss AI in CAPTCHA and 2FA as well. ...

6 Helmi 20251h 1min