Episode 169: In this episode of Critical Thinking - Bug Bounty Podcast gr3pme goes over some of the changes from OAuth 2.0 vs 2.1 and how Hackers can capitalize. Follow us on twitter at: <a href="https://x.com/ctbbpodcast" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/ctbbpodcast</a>Got any ideas and suggestions? Feel free to send us any feedback here: <a href="mailto:info@criticalthinkingpodcast.io" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">info@criticalthinkingpodcast.io</a>Shoutout to<a href="https://twitter.com/realytcracker" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"> YTCracker</a> for the awesome intro music! ====== Links ======Follow your hosts Rhynorater, rez0 and gr3pme on X:&nbsp;<a href="https://x.com/Rhynorater" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/Rhynorater</a><a href="https://x.com/rez0__" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/rez0__</a><a href="https://x.com/gr3pme" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://x.com/gr3pme</a> Critical Research Lab:<a href="https://lab.ctbb.show/" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://lab.ctbb.show/</a>&nbsp; ====== Ways to Support CTBBPodcast ======Hop on the CTBB Discord at <a href="https://ctbb.show/discord" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://ctbb.show/discord</a>! We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc. You can also find some hacker swag at <a href="https://ctbb.show/merch" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://ctbb.show/merch</a>! Today's Sponsor: Check out ThreatLocker Ringfencing<a href="https://www.criticalthinkingpodcast.io/tl-rf" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://www.criticalthinkingpodcast.io/tl-rf</a> ====== This Week in Bug Bounty ====== Intigriti is providing free Burp Pro for Hackers!<a href="https://www.intigriti.com/blog/news/intigriti-collaborates-with-portswigger-to-support-ethical-hacking-excellence" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://www.intigriti.com/blog/news/intigriti-collaborates-with-portswigger-to-support-ethical-hacking-excellence</a> ====== Resources ======Django-allauth Account Takeover (ZeroPath Audit)<a href="https://zeropath.com/blog/django-allauth-account-takeover-vulnerabilities" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://zeropath.com/blog/django-allauth-account-takeover-vulnerabilities</a> CVE-2025-4144: Cloudflare Workers PKCE Bypass<a href="https://github.com/cloudflare/workers-oauth-provider/security/advisories/GHSA-qgp8-v765-qxx9" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://github.com/cloudflare/workers-oauth-provider/security/advisories/GHSA-qgp8-v765-qxx9</a> CVE-2025-54576: OAuth2-Proxy Auth Bypass<a href="https://zeropath.com/blog/cve-2025-54576-oauth2-proxy-auth-bypass" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);">https://zeropath.com/blog/cve-2025-54576-oauth2-proxy-auth-bypass</a> ====== Timestamps ======(00:00:00) Introduction(00:02:16) OAuth 2.0 Standards(00:12:08) Agent to Agent Communication(00:17:19) CVE Case studies

<description>&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Episode 169: In this episode of Critical Thinking - Bug Bounty Podcast gr3pme goes over some of the changes from OAuth 2.0 vs 2.1 and how Hackers can capitalize.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Follow us on twitter at: &lt;/span&gt;&lt;a href="https://x.com/ctbbpodcast" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/ctbbpodcast&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Got any ideas and suggestions? Feel free to send us any feedback here: &lt;/span&gt;&lt;a href="mailto:info@criticalthinkingpodcast.io" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;info@criticalthinkingpodcast.io&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Shoutout to&lt;/span&gt;&lt;a href="https://twitter.com/realytcracker" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt; YTCracker&lt;/a&gt;&lt;span style="background-color: transparent;"&gt; for the awesome intro music!&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Links ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Follow your hosts Rhynorater, rez0 and gr3pme on X:&amp;nbsp;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://x.com/Rhynorater" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/Rhynorater&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://x.com/rez0__" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/rez0__&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://x.com/gr3pme" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://x.com/gr3pme&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Critical Research Lab:&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://lab.ctbb.show/" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://lab.ctbb.show/&lt;/a&gt;&lt;span style="background-color: transparent;"&gt;&amp;nbsp;&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Ways to Support CTBBPodcast ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Hop on the CTBB Discord at &lt;/span&gt;&lt;a href="https://ctbb.show/discord" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://ctbb.show/discord&lt;/a&gt;&lt;span style="background-color: transparent;"&gt;!&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;You can also find some hacker swag at &lt;/span&gt;&lt;a href="https://ctbb.show/merch" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://ctbb.show/merch&lt;/a&gt;&lt;span style="background-color: transparent;"&gt;!&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Today's Sponsor: Check out ThreatLocker Ringfencing&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://www.criticalthinkingpodcast.io/tl-rf" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://www.criticalthinkingpodcast.io/tl-rf&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== This Week in Bug Bounty ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Intigriti is providing free Burp Pro for Hackers!&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://www.intigriti.com/blog/news/intigriti-collaborates-with-portswigger-to-support-ethical-hacking-excellence" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://www.intigriti.com/blog/news/intigriti-collaborates-with-portswigger-to-support-ethical-hacking-excellence&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Resources ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;Django-allauth Account Takeover (ZeroPath Audit)&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://zeropath.com/blog/django-allauth-account-takeover-vulnerabilities" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://zeropath.com/blog/django-allauth-account-takeover-vulnerabilities&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;CVE-2025-4144: Cloudflare Workers PKCE Bypass&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://github.com/cloudflare/workers-oauth-provider/security/advisories/GHSA-qgp8-v765-qxx9" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://github.com/cloudflare/workers-oauth-provider/security/advisories/GHSA-qgp8-v765-qxx9&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;CVE-2025-54576: OAuth2-Proxy Auth Bypass&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;a href="https://zeropath.com/blog/cve-2025-54576-oauth2-proxy-auth-bypass" target="_blank" style="background-color: transparent; color: rgb(17, 85, 204);"&gt;https://zeropath.com/blog/cve-2025-54576-oauth2-proxy-auth-bypass&lt;/a&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;====== Timestamps ======&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:00:00) Introduction&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:02:16) OAuth 2.0 Standards&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:12:08) Agent to Agent Communication&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;span style="background-color: transparent;"&gt;(00:17:19) CVE Case studies&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;</description>

Episode 169: In this episode of Critical Thinking - Bug Bounty Podcast gr3pme goes over some of the changes from OAuth 2.0 vs 2.1 and how Hackers can capitalize.Follow us on twitter at: https://x.com/ctbbpodcastGot any ideas and suggestions? Feel f...

Critical Thinking - Bug Bounty Podcast

Episode 169: Attacking OAuth 2.1

Episode 169: Attacking OAuth 2.1

Description