Episode 168: In this episode of Critical Thinking - Bug Bounty Podcast we’re getting a visit from the XSS Doctor. Jonathan joins us to go through his Client-side workflow, run labs, and diagnose some bugs live. Follow us on twitter at: <a href="https://x.com/ctbbpodcast" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/ctbbpodcast</a>Got any ideas and suggestions? Feel free to send us any feedback here: <a href="mailto:info@criticalthinkingpodcast.io" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">info@criticalthinkingpodcast.io</a>Shoutout to<a href="https://twitter.com/realytcracker" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"> YTCracker</a> for the awesome intro music! ====== Links ======Follow your hosts Rhynorater, rez0 and gr3pme on X:&nbsp;<a href="https://x.com/Rhynorater" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/Rhynorater</a><a href="https://x.com/rez0__" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/rez0__</a><a href="https://x.com/gr3pme" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/gr3pme</a> Critical Research Lab:<a href="https://lab.ctbb.show/" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://lab.ctbb.show/</a>&nbsp; ====== Ways to Support CTBBPodcast ======Hop on the CTBB Discord at <a href="https://ctbb.show/discord" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://ctbb.show/discord</a>! We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc. You can also find some hacker swag at <a href="https://ctbb.show/merch" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://ctbb.show/merch</a>! Today’s Guest: https://x.com/xssdoctor ====== Resources ====== The Dot-Dot-Slash That Frameworks Hand You: CSPT Across Every Major Frontend Frameworkhttps://lab.ctbb.show/research/the-dot-dot-slash-that-frameworks-hand-you URL validation bypass cheat sheet<a href="https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet</a> ====== Timestamps ======(00:00:00) Introduction(00:01:37) Home Automation AI Hack &amp; E-signature bug stories(00:12:15) E-signature bug(00:17:01) XSS DR Intro and Bug Bounty Journey(00:31:51) CSPT Workflows(01:07:57) Wildcard Path Parameters&nbsp;(01:30:34) Custom Sinks

<description>&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Episode 168: In this episode of Critical Thinking - Bug Bounty Podcast we’re getting a visit from the XSS Doctor. Jonathan joins us to go through his Client-side workflow, run labs, and diagnose some bugs live.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Follow us on twitter at: &lt;/span&gt;&lt;a href="https://x.com/ctbbpodcast" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/ctbbpodcast&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Got any ideas and suggestions? Feel free to send us any feedback here: &lt;/span&gt;&lt;a href="mailto:info@criticalthinkingpodcast.io" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;info@criticalthinkingpodcast.io&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Shoutout to&lt;/span&gt;&lt;a href="https://twitter.com/realytcracker" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt; YTCracker&lt;/a&gt;&lt;span style="background-color: transparent;"&gt; for the awesome intro music!&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Links ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Follow your hosts Rhynorater, rez0 and gr3pme on X:&amp;nbsp;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://x.com/Rhynorater" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/Rhynorater&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://x.com/rez0__" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/rez0__&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://x.com/gr3pme" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/gr3pme&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Critical Research Lab:&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://lab.ctbb.show/" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://lab.ctbb.show/&lt;/a&gt;&lt;span style="background-color: transparent;"&gt;&amp;nbsp;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Ways to Support CTBBPodcast ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Hop on the CTBB Discord at &lt;/span&gt;&lt;a href="https://ctbb.show/discord" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://ctbb.show/discord&lt;/a&gt;&lt;span style="background-color: transparent;"&gt;!&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;You can also find some hacker swag at &lt;/span&gt;&lt;a href="https://ctbb.show/merch" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://ctbb.show/merch&lt;/a&gt;&lt;span style="background-color: transparent;"&gt;!&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Today’s Guest: https://x.com/xssdoctor&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Resources ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color: rgb(13, 13, 13);"&gt;The Dot-Dot-Slash That Frameworks Hand You: CSPT Across Every Major Frontend Framework&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="color: rgb(13, 13, 13);"&gt;https://lab.ctbb.show/research/the-dot-dot-slash-that-frameworks-hand-you&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;URL validation bypass cheat sheet&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://portswigger.net/web-security/ssrf/url-validation-bypass-cheat-sheet&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Timestamps ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:00:00) Introduction&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:01:37) Home Automation AI Hack &amp;amp; E-signature bug stories&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:12:15) E-signature bug&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:17:01) XSS DR Intro and Bug Bounty Journey&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:31:51) CSPT Workflows&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(01:07:57) Wildcard Path Parameters&amp;nbsp;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(01:30:34) Custom Sinks&lt;/span&gt;&lt;/p&gt;</description>

Episode 168: In this episode of Critical Thinking - Bug Bounty Podcast we’re getting a visit from the XSS Doctor. Jonathan joins us to go through his Client-side workflow, run labs, and diagnose some bugs live.Follow us on twitter at: https://x.com...

Critical Thinking - Bug Bounty Podcast

Episode 168: XSSDoctor - Client-side Path Traversal Research

Episode 168: XSSDoctor - Client-side Path Traversal Research

Description