Best Erb Report Podcasts (2024)

1
20: Get ready for the Israeli Iran war and the casualties that follow 11:25

6d ago11:25

11:25

Get ready for the Israeli Iran war and the casualties that followBy The Erb Report

1
Episode 86: The X-Correlation between Frans & RCE - Research Drop 42:09

4m ago42:09

42:09

Episode 86: In this episode of Critical Thinking - Bug Bounty Podcast Frans blows Justin’s mind with a sneak peak of his new presentation. Note: This is a little different from our normal episode, and video is recommended. So head over to ctbb.show/yt if you feel like you’re missing something. Follow us on twitter at: @ctbbpodcast We're new to this…

1
Episode 85: Practical Applications of DEFCON 32 Web Research 1:30:30

1m ago1:30:30

1:30:30

Episode 85: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel talk through some of the research coming out of DEFCON, mainly from the PortSwigger team. Web timing attacks, cache exploitation, and exploits related to email protocols are all featured. Plus we also talk some fun Apache hacks from Orange Tsai Follow us on twitte…

1
Episode 84: 0xLupin & Takeaways from Google's Las Vegas BugSwat 27:15

6d ago27:15

27:15

Episode 84: In this episode of Critical Thinking - Bug Bounty Podcast, Justin is joined by Roni Carta (@0xLupin) to discuss their MVH win at the recent Google LHE, and share some technical observations they had with the target and the event. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedba…

1
Episode 83: Brainstorming Proxy Plugins 54:50

12d ago54:50

54:50

Episode 83: In this episode of Critical Thinking - Bug Bounty Podcast Joel and Justin are brainstorming new features and improvements for Caido, such as the implementation of a 403 bypassing workflow, a text expander, Tracing Cookies, and more. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any fee…

1
Episode 82: Part-Time Bug Bounty 36:32

14d ago36:32

36:32

Episode 82: In this episode of Critical Thinking - Bug Bounty Podcast Joel Margolis discusses strategies and tips for part-time bug bounty hunting. He covers things like finding (and enforcing) balance, picking programs and goals, and streamlining your process to optimize productivity. Follow us on twitter at: @ctbbpodcast We're new to this podcast…

1
19: When will the Israeli Palestinian war stop when Trump takes office? 9:50

28d ago9:50

9:50

When will the Israeli Palestinian war stop when Trump takes office?By The Erb Report

1
Episode 81: Crushing Client-Side on Any Scope with MatanBer 2:04:48

21d ago2:04:48

2:04:48

Episode 81: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by MatanBer to go over some recent bug reports, as well as share some tips and tricks on client-side hacking and using DevTools effectively. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@…

1
Episode 80: Pwn2Own VS H1 Live Hacking Event (feat SinSinology) 2:49:26

28d ago2:49:26

2:49:26

Episode 80: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by Sina Kheirkhah to talk about the start of his hacking journey and explore the differences between the Pwn2Own and HackerOne Events Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@critica…

1
18: Project 2025 what’s that all about? 9:09

1M ago9:09

9:09

Project 2025 what’s that all about?By The Erb Report

1
Episode 79: The State of CSS Injection - Leaking Text Nodes & HTML Attributes 1:10:25

1M ago1:10:25

1:10:25

Episode 79: In this episode of Critical Thinking - Bug Bounty Podcast we deepdive CSS injection, and explore topics like sequential import chaining, font ligatures, and attribute exfiltration. Follow us on twitter at: @ctbbpodcast Send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the awesome intro music! ------ Li…

1
17: They will start rolling out the FEMA camps soon beware 8:04

2M ago8:04

8:04

They will start rolling out the FEMA camps soon bewareBy The Erb Report

1
Episode 78: Less Writing, More Hacking - Reporting Efficiency Techniques 1:06:25

1M ago1:06:25

1:06:25

Episode 78: In this episode of Critical Thinking - Bug Bounty Podcast we’re talking about writing reports. We share some tips that we’ve learned, and discuss ways that AI can (and can’t) help with that process. We also talk about the benefit of using tools like Fabric, Loom, and ShareX. Follow us on twitter at: @ctbbpodcast We're new to this podcas…

1
Episode 77: Bug Bounty Mental - Practical Tips for Staying Sharp & Motivated 1:50:26

2M ago1:50:26

1:50:26

Episode 77: In this episode of Critical Thinking - Bug Bounty Podcast Joel and Justin discuss some fresh writeups including some MongoDB injections, ORMs, and exploits in Kakao and iOS before pivoting into a conversation about staying motivated and avoiding burnout while hunting. Follow us on twitter at: @ctbbpodcast We're new to this podcasting th…

1
16: Get ready for more election scams in November here it comes folks 10:15

2M ago10:15

10:15

Get ready for more election scams in November here it comes folksBy The Erb Report

1
15: We’ve got about 90 days before major food shortages, prepare yourself now 8:15

2M ago8:15

8:15

We’ve got about 90 days before major food shortages, prepare yourselfBy The Erb Report

1
Episode 76: Match & Replace - HTTP Proxies' Most Underrated Feature 1:34:43

2M ago1:34:43

1:34:43

Episode 76: In this episode of Critical Thinking - Bug Bounty Podcast we’re talking about Match and Replace and the often overlooked use cases for it, like bypassing paywalls, modifying host headers, and storing payloads. We also talk about the HackerOne Ambassador World Cup and the issues with dupe submissions, and go through some write-ups. Follo…

1
14: Well, the WHO pulled it off at the last minute and now they got a global pandemic treaty. 8:17

3M ago8:17

8:17

Well, the WHO pulled it off at the last minute and now they got a global pandemic treaty.By The Erb Report

1
Episode 75: Rerun of The OG Bug Bounty King - Frans Rosen 2:44:52

3M ago2:44:52

2:44:52

Episode 75: In this episode of Critical Thinking - Bug Bounty Podcast, Justin and Joel are sick, So instead of a new full episode, we're going back 30 episodes to review. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the …

1
13: The social credit score is coming to the USA prepare yourself. It will be here soon 14:10

3M ago14:10

14:10

The social credit score is coming to the USA prepare yourself. It will be here soonBy The Erb Report

1
12: There will be Russian troops their navy ships right off the coast of Cuba. 8:50

3M ago8:50

8:50

There will be Russian troops their navy ships right off the coast of Cuba. What’s Biden doing about this?By The Erb Report

1
Episode 74: Supply Chain Attack Primer - Popping RCE Without an HTTP Request (feat 0xLupin) 1:38:20

2M ago1:38:20

1:38:20

Episode 74: In this episode of Critical Thinking - Bug Bounty Podcast Justin sits down with Roni "Lupin" Carta for a deep dive into supply chain attacks and dependency confusion. We explore the supply chain attacks, the ethical considerations surrounding maintainers and hosting packages on public registries, and chat about the vision and uses of hi…

1
11: We’re close to World War 3 what will you do 11:52

3M ago11:52

11:52

We’re close to World War 3 what will you do and where will you goBy The Erb Report

1
10: Covid and the Bird Flu they are here and now we have to deal with both 9:48

3M ago9:48

9:48

Covid and the Bird Flu they are here and now we have to deal with both, what should we do?By The Erb Report

1
9: President Trump is found guilty on all 34 counts according to the jury. This is bad news. 10:37

3M ago10:37

10:37

President Trump is found guilty on all 34 counts according to the jury. This is bad news for the republicans.By The Erb Report

1
Episode 73: Sandboxed IFrames and WAF Bypasses 31:13

3M ago31:13

31:13

Episode 73: In this episode of Critical Thinking - Bug Bounty Podcast we give a brief recap of Nahamcon and then touch on some topics like WAF bypass tools, sandboxed iframes, and programs redacting your reports. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkin…

1
8: Will Europe and the UK start World War III with Russia. It’s already begun 11:39

3M ago11:39

11:39

get reBy The Erb Report

1
7: They will remove God any way they can the Elites master plan 11:18

3M ago11:18

11:18

They will remove God any way they can the Elites master planBy The Erb Report

1
6: This is your warning please be careful and prepare yourself for the next pandemic 11:50

3M ago11:50

11:50

This is your warning please be careful and prepare yourself for the next pandemicBy The Erb Report

1
5: Will the Death of the Iranian president trigger World War 3 8:05

3M ago8:05

8:05

Will the Death of the Iranian president trigger World War 3 Listen and find outBy The Erb Report

1
4: The Elites who really runs the world find out 12:45

3M ago12:45

12:45

The Elites who really runs the world find out now, listen you might be shocked!By The Erb Report

1
3: The H5N1 Bird Flu, What will you do 8:44

3M ago8:44

8:44

The H5N1 Bird Flu, What will you do? will you take this vaccine?By The Erb Report

1
2: What groups will be the first to have to take the bird flu vaccine 9:50

3M ago9:50

9:50

What groups will be the first to have to take the bird flu vaccine?By The Erb Report

1
1: The WHO pandemic treaty what you should know now 9:45

3M ago9:45

9:45

The WHO pandemic treaty what you should know now, check this out!By The Erb Report

1
1: The Erb Report introduction 1:36

3M ago1:36

1:36

By The Erb Report

1
Episode 72: Research TLDRs & Smuggling Payloads in Well Known Data Types 52:49

3M ago52:49

52:49

Episode 72: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss some hot research from the past couple months. This includes ways to smuggle payloads in phone numbers and IPv6 Addresses, the NextJS SSRF, the PDF.JS PoC drop, and a GitHub Enterprise Indirect Method Information bug. Also, we have an attack vector feature…

1
Episode 71: More VDP Chats & AI Bias Bounty Strats with Keith Hoodlet 1:45:21

3M ago1:45:21

1:45:21

Episode 71: In this episode of Critical Thinking - Bug Bounty Podcast Keith Hoodlet joins us to weigh in on the VDP Debate. He shares some of his insights on when VDPs are appropriate in a company's security posture, and the challenges of securing large organizations. Then we switch gears and talk about AI bias bounties, where Keith explains the ap…

1
Episode 70: NahamCon and CSP Bypasses Everywhere 43:08

4M ago43:08

43:08

Episode 70: In this episode of Critical Thinking - Bug Bounty Podcast we’re once again joined by Ben Sadeghipour to talk about some Nahamcon news, as well as discuss a couple other LHE’s taking place. Then they cover CI/CD and drop some cool CSP Bypasses. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send…

1
Episode 69: Johan Carlsson - 3 Month Check-in on Full-time Bug Bounty. 1:49:04

4M ago1:49:04

1:49:04

Episode 69: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Johan Carlsson to hear about some updates on his bug hunting journey. We deep-dive a CSP bypass he found in GitHub, a critical he found in GitLab's pipeline, and also talk through his approach to using script gadgets and adapting to highly CSP'd environments. Then…

1
Episode 68: 0-days & HTMX-SS with Mathias 1:03:53

4M ago1:03:53

1:03:53

Episode 68: In this episode of Critical Thinking - Bug Bounty Podcast Mathias is back with some fresh HTMX research, including CSP bypass using HTMX triggers, converting client-side response header injection to XSS, bypassing HTMX disable, and the challenges of using HTMX in larger applications and the potential performance trade-offs. We also talk…

1
Episode 67: VDPs & Accidental Program VS Hacker Debate Part 2 1:19:51

4M ago1:19:51

1:19:51

Episode 67: In this episode of Critical Thinking - Bug Bounty Podcast we deepdive on the topic of Vulnerability Disclosure Programs (VDPs) and whether they are beneficial or not. We also touch on the topic of leaderboard accuracy, and continue the Program VS Hacker debate regarding allocating funds for bounties. Follow us on twitter at: @ctbbpodcas…

1
Episode 66: CDN-CGI Research, Intent To Ship, and Louis Vuitton 58:20

4M ago58:20

58:20

Episode 66: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss the recent YesWeHack Louis Vuitton LHE, the importance of failure as growth in bug bounty, and Justin shares his research on CDN CGI. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@…

1
Episode 65: Motivation and Methodology with Sam Curry (Zlz) 2:29:05

5M ago2:29:05

2:29:05

Episode 65: In this episode of Critical Thinking - Bug Bounty Podcast we sit down with Sam Curry to discuss the ethical considerations and effectiveness of hacking, the importance of good intent, and the enjoyment Sam derives from pushing the boundaries to find bugs. He shares stories of his experiences, including hacking Tesla, online casinos,Star…

1
Episode 64: .NET Remoting, CDN Attack Surface, and Recon vs Main App 1:08:04

5M ago1:08:04

1:08:04

Episode 64: In this episode of Critical Thinking - Bug Bounty Podcast we talk about Justin and Joel delve into .NET remoting and how it can be exploited, a recent bypass in the Dom Purify library and some interesting functionality in the Cloudflare CDN-CGI endpoint. They also touch on the importance of collaboration and knowledge sharing, JavaScrip…

1
Alms Army Course 4:13

5M ago4:13

4:13

Alms Army Course https://www.armylearningmanagementsystem.com/course/ the Army Learning Management System (ALMS) has emerged as a cornerstone of the U.S. Army's educational ethos. This digital platform facilitates a range of courses designed to enhance the professional development and operational effectiveness of soldiers. From leadership training …

1
ERB HRC 7:18

5M ago7:18

7:18

https://www.hrcarmy.org/erb-hrc/ ERB HRC The Enlisted Record Brief (ERB) is an essential document for every soldier serving in the United States Army. Managed by the Human Resources Command (HRC), the ERB is a concise, yet comprehensive record that outlines a soldier's military career, including personal information, training, education, and servic…

1
MHS Genesis 9:50

5M ago9:50

9:50

https://www.akooffline.net/mhs-genesis/ MHS Genesis MHS GENESIS is the electronic health record (EHR) system implemented across the United States Department of Defense (DoD) healthcare and military health system. It is designed to provide a single, integrated patient record for service members, veterans, and their families, encompassing medical and…

1
Episode 63: JHaddix Returns 1:21:35

5M ago1:21:35

1:21:35

Episode 63: In this episode of Critical Thinking - Bug Bounty Podcast we welcome back Jason Haddix (From Episode 12) to talk about some updates to his The Bug Hunter's Methodology, as well as his own personal life and hacking journey. We talk about the start of his new company, and then venture into topics such as using threat intelligence and buyi…

1
Episode 62: Frontend Language Oddities 58:43

5M ago58:43

58:43

Episode 62: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel are back with some additional research resources that didn’t make the Portswigger Top-Ten, but that are worth looking at. Follow us on twitter at: @ctbbpodcast Feel free to send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the aw…

1
Episode 61: A Hacker on Wall Street - JR0ch17 1:27:00

6M ago1:27:00

1:27:00

Episode 61: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by Jasmin Landry to share some stories about startup security, bug bounty, and the challenges of balancing both. He also shares his methodology for discovering OAuth-related bugs, highlights some differences between structured learning and self-teaching, and then…

Podcasts Worth a Listen

Erb Report Podcasts

Podcasts Worth a Listen

Quick Reference Guide