Just letting yall know that now we have a dedicated "writeups" tab on our research page! - lab.ctbb.show If you want to publish our first writeup, check the link right above "Latest Content".

New Episode is Out! - youtu.be/rbDdiM1L2Bo In episode 145, gr3pme lets us in on some of his notetaking tips, including his templates, threat modelling, and ways he uses notes to help with collaboration.

I’ve had a lot of questions since I’ve started hunting on how I threat model and note take for longer term success on a target. In this EP, I’ve shared how alongside the templates I use for targets. I hope y’all find it useful!

HackerNotes TLDR for episode 145! — blog.criticalthinkingpodcast.io/p/hackernotes-… ►⠀Syntax Confusion: Two or more components in a system may interpret the same input differently due to ambiguous or inconsistent syntax rules. Learn more in YesWeHack ⠵'s new blog: The Minefield Between Syntaxes:

The creator of HackerNotes gr3pme showed us his note taking methodology this week. Really cool and useful insights on how he approaches his note taking and how it helps him! You can find the templates in episode 145's HackerNotes: blog.criticalthinkingpodcast.io/p/hackernotes-…

Super nice behaviour here - nice work castilho

Been a while since I wrote a blog post, so here is a funny one about how I was able to leak more than 5M user PII data using a really simple trick :) Enjoy! hacktus.tech/how-a-fixed-id… #BugBounty

When I say this is a crazy episode of CTBB...

First full squad episode = one of the most fun to date. Our Halloween special is live 👀🎃

This may be the perfect podcast episode. It has everything: hacking tips, crazy stories, amazing music and 3 buddies having a great time. Great job Critical Thinking - Bug Bounty Podcast Justin Gardner gr3pme Joseph Thacker youtu.be/FdByZdhlSlU?si…

When you get a message like this from xssdoctor , you know it’s gonna be a banger

> Be me, age 13 > Dad has implemented time limit restrictions on wifi > discover that you can reset the restrictions by turning the TP-Link device off and on again a few times > Play Pokémon a lot, and curiosity to learn game dev kicks off > Flight to Japan with mom and little

Podcast review: Critical Thinking Bug Bounty Podcast (Critical Thinking - Bug Bounty Podcast) w/ Justin Gardner + gr3pme + (?). Ep. 146 on horror stories. B and A-. 30 mins is news. Then an hour+ of stories. Should be split. Part 2 is very entertaining even if I only understood half of it. Def recommend.

Bug bounty hunters near London! The next HackerOne Brand Ambassador meet up is on Sat 29th November and we have a few spaces left. RSVP h1.community/e/m8kk8m What to expect: - Talk from / XNL -н4cĸ3r (and @xnl-h4ck3r in the new Sky) on his amazing tools 🔧 - Hackalong 👨‍💻 - 🆓🍕 - 🆓swag 🎁 - Meet, chat, learn!

Me watching my $140 dupe split bounty roll in after spending 10 hours a day on the scope

I've been a Triager for so many years. Now, I'm planing to do bug hunting full time. Can someone guide on how to prepare, what to learn etc? Just because I was a Triager doesn't mean that I'm good at hunting!