A "by Hackers for Hackers" podcast focused on technical content ranging from bug bounty tips, to write-up explanations, to the latest hacking techniques.
…
continue reading
The podcast that is designed to bring today's insights to automotive retail professionals from the people who are LIVING it day in and day out! Support this podcast: https://podcasters.spotify.com/pod/show/dealer-talk/support
…
continue reading
Episode 83: In this episode of Critical Thinking - Bug Bounty Podcast Joel and Justin are brainstorming new features and improvements for Caido, such as the implementation of a 403 bypassing workflow, a text expander, Tracing Cookies, and more. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any fee…
…
continue reading
Episode 82: In this episode of Critical Thinking - Bug Bounty Podcast Joel Margolis discusses strategies and tips for part-time bug bounty hunting. He covers things like finding (and enforcing) balance, picking programs and goals, and streamlining your process to optimize productivity. Follow us on twitter at: @ctbbpodcast We're new to this podcast…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 81: Crushing Client-Side on Any Scope with MatanBer
2:04:48
2:04:48
Play later
Play later
Lists
Like
Liked
2:04:48
Episode 81: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by MatanBer to go over some recent bug reports, as well as share some tips and tricks on client-side hacking and using DevTools effectively. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 80: Pwn2Own VS H1 Live Hacking Event (feat SinSinology)
2:49:26
2:49:26
Play later
Play later
Lists
Like
Liked
2:49:26
Episode 80: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by Sina Kheirkhah to talk about the start of his hacking journey and explore the differences between the Pwn2Own and HackerOne Events Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@critica…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 79: The State of CSS Injection - Leaking Text Nodes & HTML Attributes
1:10:25
1:10:25
Play later
Play later
Lists
Like
Liked
1:10:25
Episode 79: In this episode of Critical Thinking - Bug Bounty Podcast we deepdive CSS injection, and explore topics like sequential import chaining, font ligatures, and attribute exfiltration. Follow us on twitter at: @ctbbpodcast Send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the awesome intro music! ------ Li…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 78: Less Writing, More Hacking - Reporting Efficiency Techniques
1:06:25
1:06:25
Play later
Play later
Lists
Like
Liked
1:06:25
Episode 78: In this episode of Critical Thinking - Bug Bounty Podcast we’re talking about writing reports. We share some tips that we’ve learned, and discuss ways that AI can (and can’t) help with that process. We also talk about the benefit of using tools like Fabric, Loom, and ShareX. Follow us on twitter at: @ctbbpodcast We're new to this podcas…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 77: Bug Bounty Mental - Practical Tips for Staying Sharp & Motivated
1:50:26
1:50:26
Play later
Play later
Lists
Like
Liked
1:50:26
Episode 77: In this episode of Critical Thinking - Bug Bounty Podcast Joel and Justin discuss some fresh writeups including some MongoDB injections, ORMs, and exploits in Kakao and iOS before pivoting into a conversation about staying motivated and avoiding burnout while hunting. Follow us on twitter at: @ctbbpodcast We're new to this podcasting th…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 76: Match & Replace - HTTP Proxies' Most Underrated Feature
1:34:43
1:34:43
Play later
Play later
Lists
Like
Liked
1:34:43
Episode 76: In this episode of Critical Thinking - Bug Bounty Podcast we’re talking about Match and Replace and the often overlooked use cases for it, like bypassing paywalls, modifying host headers, and storing payloads. We also talk about the HackerOne Ambassador World Cup and the issues with dupe submissions, and go through some write-ups. Follo…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 75: *Rerun* of The OG Bug Bounty King - Frans Rosen
2:44:52
2:44:52
Play later
Play later
Lists
Like
Liked
2:44:52
Episode 75: In this episode of Critical Thinking - Bug Bounty Podcast, Justin and Joel are sick, So instead of a new full episode, we're going back 30 episodes to review. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 74: Supply Chain Attack Primer - Popping RCE Without an HTTP Request (feat 0xLupin)
1:38:20
1:38:20
Play later
Play later
Lists
Like
Liked
1:38:20
Episode 74: In this episode of Critical Thinking - Bug Bounty Podcast Justin sits down with Roni "Lupin" Carta for a deep dive into supply chain attacks and dependency confusion. We explore the supply chain attacks, the ethical considerations surrounding maintainers and hosting packages on public registries, and chat about the vision and uses of hi…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 73: Sandboxed IFrames and WAF Bypasses
31:13
31:13
Play later
Play later
Lists
Like
Liked
31:13
Episode 73: In this episode of Critical Thinking - Bug Bounty Podcast we give a brief recap of Nahamcon and then touch on some topics like WAF bypass tools, sandboxed iframes, and programs redacting your reports. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkin…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 72: Research TLDRs & Smuggling Payloads in Well Known Data Types
52:49
52:49
Play later
Play later
Lists
Like
Liked
52:49
Episode 72: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss some hot research from the past couple months. This includes ways to smuggle payloads in phone numbers and IPv6 Addresses, the NextJS SSRF, the PDF.JS PoC drop, and a GitHub Enterprise Indirect Method Information bug. Also, we have an attack vector feature…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 71: More VDP Chats & AI Bias Bounty Strats with Keith Hoodlet
1:45:21
1:45:21
Play later
Play later
Lists
Like
Liked
1:45:21
Episode 71: In this episode of Critical Thinking - Bug Bounty Podcast Keith Hoodlet joins us to weigh in on the VDP Debate. He shares some of his insights on when VDPs are appropriate in a company's security posture, and the challenges of securing large organizations. Then we switch gears and talk about AI bias bounties, where Keith explains the ap…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 70: NahamCon and CSP Bypasses Everywhere
43:08
43:08
Play later
Play later
Lists
Like
Liked
43:08
Episode 70: In this episode of Critical Thinking - Bug Bounty Podcast we’re once again joined by Ben Sadeghipour to talk about some Nahamcon news, as well as discuss a couple other LHE’s taking place. Then they cover CI/CD and drop some cool CSP Bypasses. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 69: Johan Carlsson - 3 Month Check-in on Full-time Bug Bounty.
1:49:04
1:49:04
Play later
Play later
Lists
Like
Liked
1:49:04
Episode 69: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Johan Carlsson to hear about some updates on his bug hunting journey. We deep-dive a CSP bypass he found in GitHub, a critical he found in GitLab's pipeline, and also talk through his approach to using script gadgets and adapting to highly CSP'd environments. Then…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 68: 0-days & HTMX-SS with Mathias
1:03:53
1:03:53
Play later
Play later
Lists
Like
Liked
1:03:53
Episode 68: In this episode of Critical Thinking - Bug Bounty Podcast Mathias is back with some fresh HTMX research, including CSP bypass using HTMX triggers, converting client-side response header injection to XSS, bypassing HTMX disable, and the challenges of using HTMX in larger applications and the potential performance trade-offs. We also talk…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 67: VDPs & Accidental Program VS Hacker Debate Part 2
1:19:51
1:19:51
Play later
Play later
Lists
Like
Liked
1:19:51
Episode 67: In this episode of Critical Thinking - Bug Bounty Podcast we deepdive on the topic of Vulnerability Disclosure Programs (VDPs) and whether they are beneficial or not. We also touch on the topic of leaderboard accuracy, and continue the Program VS Hacker debate regarding allocating funds for bounties. Follow us on twitter at: @ctbbpodcas…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 66: CDN-CGI Research, Intent To Ship, and Louis Vuitton
58:20
58:20
Play later
Play later
Lists
Like
Liked
58:20
Episode 66: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss the recent YesWeHack Louis Vuitton LHE, the importance of failure as growth in bug bounty, and Justin shares his research on CDN CGI. Follow us on twitter at: @ctbbpodcast We're new to this podcasting thing, so feel free to send us any feedback here: info@…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Maximizing Car Sales: The Ultimate Strategy Every Dealer Must Master
15:57
15:57
Play later
Play later
Lists
Like
Liked
15:57
Welcome to the latest episode of the Dealer Talk Podcast! Today, we're delving deep into the singular focus that dealership decision-makers should prioritize to drive more car sales—hint: not marketing, advertising, sales training, or internal processes. If you're eager to boost vehicle sales at your dealership, you won't want to miss this episode.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 65: Motivation and Methodology with Sam Curry (Zlz)
2:29:05
2:29:05
Play later
Play later
Lists
Like
Liked
2:29:05
Episode 65: In this episode of Critical Thinking - Bug Bounty Podcast we sit down with Sam Curry to discuss the ethical considerations and effectiveness of hacking, the importance of good intent, and the enjoyment Sam derives from pushing the boundaries to find bugs. He shares stories of his experiences, including hacking Tesla, online casinos,Star…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Optimizing Dealership Performance: Leveraging KPIs for Effective Advertising
18:53
18:53
Play later
Play later
Lists
Like
Liked
18:53
Welcome to the Dealer Talk Podcast, where we dive deep into strategies for optimizing your dealership's performance. In today's episode, we'll discuss the crucial role of Key Performance Indicators (KPIs) in guiding your advertising efforts and driving success in your dealership's partnerships with vendors. It's essential to inspect what you expect…
…
continue reading
If you want to leverage my own personal vendor and advertising strategy for 2024 to help you sell more cars, then tune-in to this episode to learn how I would set up your digital advertising and what vendor partners I would choose in the process. If you want to take advantage of my volume discount and FREE trials for any of the vendors discussed in…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 64: .NET Remoting, CDN Attack Surface, and Recon vs Main App
1:08:04
1:08:04
Play later
Play later
Lists
Like
Liked
1:08:04
Episode 64: In this episode of Critical Thinking - Bug Bounty Podcast we talk about Justin and Joel delve into .NET remoting and how it can be exploited, a recent bypass in the Dom Purify library and some interesting functionality in the Cloudflare CDN-CGI endpoint. They also touch on the importance of collaboration and knowledge sharing, JavaScrip…
…
continue reading
Episode 63: In this episode of Critical Thinking - Bug Bounty Podcast we welcome back Jason Haddix (From Episode 12) to talk about some updates to his The Bug Hunter's Methodology, as well as his own personal life and hacking journey. We talk about the start of his new company, and then venture into topics such as using threat intelligence and buyi…
…
continue reading
Discover this episode's ultimate car sales strategy, guaranteed to boost your sales every time! Follow these steps closely and witness a surge in car sales. Harnessing the power of your DMS and CRM data is crucial, especially when combined with the trust established by your service advisors with your customers. This synergy ensures increased sales …
…
continue reading
In this episode, I delve into the world of digital retailing in the automotive industry and debunk the misconceptions surrounding its role. Contrary to popular belief, digital retailing isn't intended to replace the traditional car-buying experience exemplified by companies like Carvana. Instead, it is a complementary tool designed to enhance custo…
…
continue reading
Episode 62: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel are back with some additional research resources that didn’t make the Portswigger Top-Ten, but that are worth looking at. Follow us on twitter at: @ctbbpodcast Feel free to send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the aw…
…
continue reading
In this episode of the Dealer Talk Podcast, we delve into the elusive realm of marketing attribution. Numerous companies tout their 'secret weapon' for tracking vendor performance, so it's easy to get lost in a sea of promises. But are these methods genuinely effective? Host Herb Anderson shares insights from years of experience, revealing a stark …
…
continue reading
Welcome to the Dealer Talk Podcast, where we delve into the essence of marketing and unravel its mysteries. In this episode, we ask the fundamental question: What is marketing? For many, marketing is the quintessential "how" – the strategic roadmap guiding us to influence consumer behavior. It's about understanding the intricate dance between busin…
…
continue reading
This episode delves into a critical aspect of online dealership success: customer experience. Despite investing heavily in driving traffic to our websites, many dealerships overlook the importance of ensuring a seamless journey for visitors once they arrive. Join me as we explore the significance of optimizing your SRP (Search Results Page) and VDP…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 61: A Hacker on Wall Street - JR0ch17
1:27:00
1:27:00
Play later
Play later
Lists
Like
Liked
1:27:00
Episode 61: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by Jasmin Landry to share some stories about startup security, bug bounty, and the challenges of balancing both. He also shares his methodology for discovering OAuth-related bugs, highlights some differences between structured learning and self-teaching, and then…
…
continue reading
Welcome to Dealer Talk, where we delve into the ever-evolving landscape of search engine marketing (SEM). For years, SEM has stood as a stalwart method to capture consumer intent, defining our ability to seize consumers' interest and amplify visibility on search engine result pages. SEM operates on a pay-to-play basis, unlike Search Engine Optimiza…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 60: Our Take on PortSwigger's Top 10 Web Hacking Techniques of 2023
1:24:37
1:24:37
Play later
Play later
Lists
Like
Liked
1:24:37
Episode 60: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel review the Portswigger Research list of top 10 web hacking techniques of 2023. Follow us on twitter at: @ctbbpodcast Send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the awesome intro music! ------ Links ------ Follow your hosts…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 59: Bug Bounty Gadget Hunting & Hacker's Intuition
1:39:09
1:39:09
Play later
Play later
Lists
Like
Liked
1:39:09
Episode 59: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joel discuss the concept of gadgets and how they can be used to escalate the impact of vulnerabilities. We talk through things like HTML injection, image injection, CRLF injection, web cache deception, leaking window location, self-stored XSS, and much more. Follow us …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 58: Youssef Sammouda - Client-Side & ATO War Stories
1:54:51
1:54:51
Play later
Play later
Lists
Like
Liked
1:54:51
Episode 58: In this episode of Critical Thinking - Bug Bounty Podcast we finally sit down with Youssef Samouda and grill him on his various techniques for finding and exploiting client-side bugs and postMessage vulnerabilities. He shares some crazy stories about race conditions, exploiting hash change events, and leveraging scroll to text fragments…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 57: Technical breakdown from Miami Hacking Event - H1-305
32:34
32:34
Play later
Play later
Lists
Like
Liked
32:34
Episode 57: In this episode of Critical Thinking - Bug Bounty Podcast, Justin and Joel are live from Miami, and recap their experience and share takeaways from the live hacking event. They highlight the importance of paying attention to client-side routing and the growing bug class of client-side path traversal. They also discuss the challenges of …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 56: Using Data Science to win Bug Bounty - Mayonaise (aka Jon Colston)
1:47:40
1:47:40
Play later
Play later
Lists
Like
Liked
1:47:40
Episode 56: Using Data Science to win Bug Bounty - Mayonaise (aka Jon Colston) Episode 56: In this episode of Critical Thinking - Bug Bounty Podcast, Justin sits down with Jon Colston to discuss how his background in digital marketing and data science has influenced his hunting methodology. We dive into subjects like data sources, automation, worki…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
🎙️ The Power of Tesla Ownership: Beyond Electric Vehicles
46:57
46:57
Play later
Play later
Lists
Like
Liked
46:57
In this episode, hosts Herb Anderson and Zack explore the unparalleled allure of Tesla ownership, transcending the mere realm of electric vehicles. They unravel the captivating narrative behind Tesla's meteoric rise in the automotive industry, attributing its success not solely to electric propulsion but to a revolutionary ownership experience. Fro…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Decoding Digital Retailing: Navigating the Present and Future of Online Car Sales
58:38
58:38
Play later
Play later
Lists
Like
Liked
58:38
Embark on a riveting journey as I team up with Kerri Wise of Autofi to unravel the mysteries surrounding digital retailing. We unravel its evolution since the seismic shift spurred by the pandemic, charting its trajectory into the future. Yet, amidst its undeniable potential, why do dealers hesitate to make Digital Retail the ultimate call-to-actio…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Automotive Dealers: Are We Ready to Compete with Amazon and Hyundai?
41:35
41:35
Play later
Play later
Lists
Like
Liked
41:35
Welcome to the Dealer Talk podcast, where insightful conversations unfold on the cutting edge of automotive retail. In today's episode, Curt and Herb dive deep into the dynamic world of e-commerce and its transformative impact on automotive retail. Join us as we dissect the latest developments, including the groundbreaking partnership between Hyund…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Why Customers Should Choose Your Business: Unlocking Digital Marketing Secrets
31:24
31:24
Play later
Play later
Lists
Like
Liked
31:24
Welcome to Dealer Talk Podcast, where you're getting an unfiltered piece of my mind today! Join me as we delve into the ever-evolving automotive industry and dissect some critical shifts that demand our attention. In this episode, I address a pressing concern: the industry's overwhelming embrace of digital solutions at the expense of traditional av…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Traditional Marketing Secrets for Dealership Success
53:19
53:19
Play later
Play later
Lists
Like
Liked
53:19
Tune in as Tim and Herb dissect why traditional methods are still incredibly potent despite the allure of digital avenues. They unravel insights, strategies, and actionable ideas you can seamlessly integrate into your dealership today.This episode is not just a conversation—it's a blueprint for success. Don't miss the opportunity to revolutionize y…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Key to Revolutionizing the Automotive Moving Industry
51:08
51:08
Play later
Play later
Lists
Like
Liked
51:08
Welcome to Dealer Talk Podcast! In this episode, we delve into the dynamic world of transportation within the automotive space with none other than Trent Broberg, CEO of Acertus. Join us as we explore the current landscape and how dealers can strategically leverage innovative solutions like Acertus to gain a competitive edge in 2024 and beyond. Fro…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Key to Customer Satisfaction: Answering the Price Question
59:49
59:49
Play later
Play later
Lists
Like
Liked
59:49
Join Shawn, known as "The BDC Alchemist," and Herb as they delve into the controversial theory surrounding the true essence of BDC (Business Development Center) departments. Are BDCs in the automotive space genuinely cultivating business or merely elevated call centers? Explore, from Shawn's perspective, the pivotal role of coaching as a crucial in…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Car Dealership Chat Widgets: From Clicks to Conversions!
49:36
49:36
Play later
Play later
Lists
Like
Liked
49:36
In this engaging conversation, Darren and I thoroughly explore the captivating evolution of chat functionality on automotive dealers' websites. Our discussion delves into its remarkable potential to transform ordinary website visitors into enthusiastic and decisive buyers seamlessly. Be sure to tune in until the end for an exclusive offer from Darr…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Revolutionizing Auto Dealerships: Unlocking Time and Profits with Simple Recon
49:32
49:32
Play later
Play later
Lists
Like
Liked
49:32
Don't miss the inaugural episode of Season 9, where I engage in an insightful discussion with the visionary founder of Simple Recon. Together, we delve into innovative strategies for decision-makers within the automotive industry to optimize their recon process, ultimately reducing the time it takes to get cars on the front line.Be sure to tune in …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Revolutionizing Everyday Tasks with OpenAI Technology at Microsoft!
45:07
45:07
Play later
Play later
Lists
Like
Liked
45:07
Join Herb and Lizz in this engaging podcast episode as they dissect Microsoft's innovative strategies that empower dealers to elevate their game. Delve into the future of car buying from the consumer's perspective, exploring the impact of cutting-edge technologies like ChatGPT. Will consumers invest over 15 hours in research, and how can dealers ad…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Data Drive: Navigating Automotive Advertising in 2024
43:59
43:59
Play later
Play later
Lists
Like
Liked
43:59
Christian and I are delving into the crucial realm of first-party data, unraveling its essence, exploring its implications for advertising strategies within the automotive industry, and, most notably, deciphering how to harness its power in 2024 amidst the unpredictable market landscape. Ensure you stay tuned until the end to glean insights into my…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Rediscovering the Thrill of Car Shopping: Dealerships are Like Disneyland!
1:04:06
1:04:06
Play later
Play later
Lists
Like
Liked
1:04:06
We released this episode ahead of schedule to provide you with an exclusive opportunity to take advantage of the deal Peter offered. Act fast, as the offer concludes during NADA 2024. Don't miss out! In this compelling episode, Herb and Peter Dufy from Dealer Image Pro engage in a candid conversation, delving into some of the industry's pivotal iss…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Episode 55: Popping WordPress Plugins - Methodology Braindump
1:44:04
1:44:04
Play later
Play later
Lists
Like
Liked
1:44:04
Episode 55: In this episode of Critical Thinking - Bug Bounty Podcast, Justin is joined by Wordpress Security Researcher Ram Gall to discuss both functionality and vulnerabilities within Wordpress Plugins. Follow us on twitter Send us any feedback here: Shoutout to YTCracker for the awesome intro music! ------ Links ------ Follow your hosts Rhynora…
…
continue reading