Best Pod Prod Podcasts (2025)

1
Episode 144: Google’s Top AI Hackers: Busfactor and Monke 52:40

Play Pause

1d ago52:40

52:40

Episode 144: In this episode of Critical Thinking - Bug Bounty Podcast Joseph is joined by Vitor Falcão and Ciarán Cotter to discuss their success at the recent Mexico LHE, as well as their journey and routines in fulltime hacking. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback he…

1
Mozilla Firefox CTO on Browser War Stories and the Path to Distinguished Engineer 1:35:32

7d ago1:35:32

1:35:32

Bobby Holley went from an intern to the CTO of Mozilla Firefox. I asked him about everything he learned in that process. We cover his full career including some interesting stories on living through the browser wars and advice on career growth.𝗣𝗼𝗱𝗰𝗮𝘀𝘁 𝗹𝗶𝗻𝗸𝘀:• Transcript: https://www.developing.dev/p/mozilla-firefox-cto-on-browser-war• YouTube: http…

1
Episode 143: New Cohost + Client-Side Gadgets, LHE Meta — Instant Global Admin in Entra! 1:04:23

8d ago1:04:23

1:04:23

Episode 143: In this episode of Critical Thinking - Bug Bounty Podcast Justin brings Brandyn back to announce him as our newest co-host. We chat about recent LHE experiences, and then break down some news. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingp…

1
Episode 142: Gr3pme's Full-Time Hunting Journey Update, Insane AI research, And Some Light News 54:50

15d ago54:50

54:50

1
Episode 141: Hacking the Pod - Google Docs 0-day & React CreateElement Exploits with Nick Copi (7urb0) 1:23:31

22d ago1:23:31

1:23:31

Episode 141: In this episode of Critical Thinking - Bug Bounty Podcast Justin sits down with Nick Copi to talk about CSPT, React, CSS Injections and how Nick hacked the pod. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shoutout to YTCracker …

1
Episode 140: Crit Research Lab Update & Client-Side Tricks Galore 57:41

29d ago57:41

57:41

Episode 140: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph give an update from The Crit Research Lab, as well as some writeups on postMessage vulnerabilities, Cookie Chaos, and more. Follow us on X at: https://x.com/ctbbpodcast Got any ideas and suggestions? Send us feedback at [email protected] Shoutout …

1
Episode 139: James Kettle - Pwning in Prod & How to do Web Security Research 2:21:51

1M ago2:21:51

2:21:51

Episode 139: In this episode of Critical Thinking - Bug Bounty Podcast Justin finally sits down with the great James Kettle to talk about HTTP Proxys, metagaming research, avoiding burnout, and why HTTP/1.1 must die! Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@critic…

1
Intern to Microsoft Distinguished Engineer in 11 Promotions (Career Story) 1:32:35

1M ago1:32:35

1:32:35

David Fowler went from an intern to a Distinguished Engineer at Microsoft. That’s 11 different promotions all at the same company. I asked him about everything he learned by going through that process. 𝗘𝗽𝗶𝘀𝗼𝗱𝗲 𝗟𝗶𝗻𝗸𝘀: • Transcript: https://www.developing.dev/p/intern-to-microsoft-distinguished • YouTube: https://youtu.be/d8tRM8RJ52M • Apple: https:/…

1
Episode 138: Caido Tools and Workflows 22:39

1M ago22:39

22:39

Episode 138: In this episode of Critical Thinking - Bug Bounty Podcast We’re talking Caido tools and workflows. Justin gives us a list of some of the Caido tools that have caught his interest, as well as how he’s using them. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: inf…

1
Ex-Stripe CTO on What Grew His Career, Hiring Without Leetcode, Coding as a Leader (Career Story) 1:59:39

2M ago1:59:39

1:59:39

David Singleton was the CTO at Stripe for 7 years before he left to start /dev/agents. Prior to Stripe, he grew from a junior engineer to a VP at Google. I recently asked him about everything he knows about career growth and being an excellent engineering leader. We discussed how Stripe hired at scale without Leetcode, why he thinks all engineering…

1
Episode 137: How We Do AI-Assisted Whitebox Review, New CSPT Gadgets, and Tools from SLCyber 49:09

2M ago49:09

49:09

Episode 137: In this episode of Critical Thinking - Bug Bounty Podcast Justin Gardner and Joseph Thacker reunite to talk about AI Hacking Assistants, CSPT and cache deception, and a bunch of tools like ch.at, Slice, Ebka, and more. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback he…

1
Behind the Scenes of this Podcast So Far (25,000 Sub Special) 15:03

2M ago15:03

15:03

We hit 25,000 subscribers! 🎉🎉🎉 Thanks so much to everyone who has supported my work, never thought we'd be here let alone this fast Had some spare studio time booked and figured I might as well use it as time for an FAQ episode. This episode is for anyone whose curious about some of the story behind the podcast Feeling very lucky, thank you all! 🙏 …

1
Episode 136: Hacking Cluely, AI Prod Sec, and How To Not Get Sued with Jack Cable 50:53

2M ago50:53

50:53

Episode 136: In this episode of Critical Thinking - Bug Bounty Podcast, Joseph Thacker sits down with Jack Cable to get the scoop on a significant bug in Cluely’s desktop application, as well as the resulting drama. They also talk about Jack’s background in government cybersecurity initiatives, and the legal risks faced by security researchers. Fol…

1
Meta Senior Manager (M2) on Manager Career Growth, PIPs, Amazon vs Meta | Stefan Mai 1:31:26

2M ago1:31:26

1:31:26

Stefan Mai was a Senior Manager (M2) with experience across Meta and Amazon. We went over his career story in growing to M2 which is equivalent to Senior Staff (IC7) in big tech. Since he started his own company now, he was happy to be fully transparent about the behind the scenes of managing in big tech. Since he founded the interview prep company…

1
Episode 135: Akamai's Ryan Barnett on WAFs, Unicode Confusables, and Triage Stories 1:26:21

2M ago1:26:21

1:26:21

Episode 135: In this episode of Critical Thinking - Bug Bounty Podcast Justin sits down with Ryan Barnett for a deep dive on WAFs. We also recap his Exploiting Unicode Normalization talk from DEFCON, and get his perspective on bug hunting from his time at Akamai. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel…

1
Instagram Staff (IC6) Promo Despite 10 Team Switches in 9 Years (Career Story) 48:15

2M ago48:15

48:15

Sash Zats grew to be a Staff Engineer (IC6) at IG despite switching teams 10 times in 9 years. His career journey was a series of jumps to exciting projects and letting career growth happen as a byproduct. I interviewed him to show you how team switches can play out. We discussed: • How 10 team switches in 9 years affected his career • The story be…

1
Episode 134: XBOW - AI Hacking Agent and Human in the Loop with Diego Djurado 1:53:35

2M ago1:53:35

1:53:35

Episode 134: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Diego Djurado to give us the scoop on XBOW. We cover a little about its architecture and approach to hunting, the challenges with hallucinations, and the future of AI in the BB landscape. Diego also shares some of his own hacking journey and successes in the Amba…

1
Amazon VP On Promotions, Getting Fired Twice, Working With Bezos | Ethan Evans 53:25

3M ago53:25

53:25

Ethan Evans went from being fired twice because of poor soft skills to getting promoted to Vice President at Amazon with a team of over 800 engineers. I asked him about everything he learned along the way. We discussed: • Being fired for poor soft skills • What VP promotions look like • Working with Jeff Bezos and Andy Jassy (current Amazon CEO) • …

1
Episode 133: Building Hacker Communities - Bug Bounty Village, getDisclosed, and the LHE Squad 1:16:12

3M ago1:16:12

1:16:12

Episode 133: In this episode of Critical Thinking - Bug Bounty Podcast we’re joined by Harley and Ari from H1 to talk some about community management roles within Bug Bounty, as well as discuss the evolution of Bug Bounty Village at DEFCON, and what they’ve got in store this year. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and…

1
Tech Lead for Meta's Most-Used Programming Language (Promotion Story) 46:09

3M ago46:09

46:09

Dwayne Reeves is a Senior Staff Engineer (IC7) at Meta who is the Tech Lead of the most used programming language (Hack) at the company. He started at the company as a new grad from MIT and shared the story of how his career grew. We discussed: • His promotions to Senior (IC5), Staff (IC6), and Senior Staff (IC7) • The value of type systems • Trans…

1
Episode 132: Archive Testing Methodology with Mathias Karlsson 1:49:32

3M ago1:49:32

1:49:32

Episode 132: In this episode of Critical Thinking - Bug Bounty Podcast, Justin Gardner is joined by Mathias Karlsson to discuss vulnerabilities associated with archives. They talk about his new tool, Archive Alchemist, and explore topics like the significance of Unicode paths, symlinks, and TAR before they end up talking about Charsets again.. Foll…

1
GoogleX Chief Scientist On Imposter Syndrome, Career Growth, Project Taste 1:11:26

3M ago1:11:26

1:11:26

Carey Nachenberg was a Chief Scientist at a GoogleX moonshot, a Fellow (senior most eng at Symantec) and a professor at UCLA. I interviewed him about his career story and we discussed: • Story behind his growth to IC10 (VP equivalent) • How high-level IC recruiting works • How imposter syndrome held him back • How to develop “project taste” • How A…

1
Episode 131: SL Cyber Writeups, Bug Bounty Metastrategy, and Orphaned Github Commits 50:36

3M ago50:36

50:36

Episode 131: In this episode of Critical Thinking - Bug Bounty Podcast we're covering Christmas in July with several banger articles from Searchlight Cyber, as well as covering things like Raycast for Windows, Third-Person prompting, and touch on the recent McDonalds Leak Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggesti…

1
Meta Senior Staff Eng (IC7) On Zuck Stories, Rapid Career Growth, Code Machine Archetype 1:26:21

3M ago1:26:21

1:26:21

Michael Novati got promoted to Senior Staff (IC7) Eng at Facebook by the age of 27. He did it while the company was still called Facebook so he had a bunch of interesting pre-IPO stories. In our conversation, we discussed: • Growth to Senior Staff (IC7) by 27 • Being the #1 code committer at Meta • Volunteering to resign if his code broke prod • St…

1
Episode 130: Minecraft Hacks to Google Hacking Star - Valentino 1:08:26

3M ago1:08:26

1:08:26

Episode 130: In this episode of Critical Thinking - Bug Bounty Podcast Justin is joined by Valentino, who shares his journey from hacking Minecraft to becoming a Google hunter. He talks us through several bugs, including an HTML Sanitizer bypass and .NET deserialization, and highlights the hyper creative approaches he tends to employ. Follow us on …

1
26 Year Old Meta Staff Eng (IC6) On Promotions, Redefining Expectations, Secret Equity Bonuses 1:17:28

4M ago1:17:28

1:17:28

Simon Kindström is a Staff Software Eng (IC6) at Instagram who joined the company as a new grad and got promoted every year. He also achieved the highest ratings ("Redefines Expectations") twice which is almost unheard of. He shared stories about his high performance including what it's like to receive secret equity bonuses. In this episode, we dis…

1
Episode 129: Is this how Bug Bounty Ends? 36:14

4M ago36:14

36:14

Episode 129: In this episode of Critical Thinking - Bug Bounty Podcast we chat about the future of hack bots and human-AI collaboration, the challenges posed by tokenization, and the need for cybersecurity professionals to adapt to the evolving landscape of hacking in the age of AI Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas an…

1
Episode 128: New Research in Blind SSRF and Self-XSS, and How to Architect Source-code Review AI Bots 58:06

4M ago58:06

58:06

Episode 128: In this episode of Critical Thinking - Bug Bounty Podcast we talking Blind SSRF and Self-XSS, as well as Reversing massive minified JS with AI and a wild Google Logo Ligature Bug Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shou…

1
Episode 127: Drama, PDF as JS Chaos, Bounty Profile Apps, And More 1:07:25

4M ago1:07:25

1:07:25

Episode 127: In this episode of Critical Thinking - Bug Bounty Podcast we address some recent bug bounty controversy before jumping into a slew of news items Follow us on X Shoutout to YTCracker for the awesome intro music! Today's Sponsor: Adobe ====== This Week In Bug Bounty ====== Hackers Guide to Google dorking YesWeCaido New Dojo Challenge Sma…

1
Episode 126: Hacking AI Series: Vulnus ex Machina - Part 3 38:32

4M ago38:32

38:32

Episode 126: In this episode of Critical Thinking - Bug Bounty Podcast we wrap up Rez0’s AI miniseries ‘Vulnus Ex Machina’. Part 3 includes a showcase of AI Vulns that Rez0 himself has found, and how much they paid out. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@cri…

1
Episode 125: How to Win Live Hacking Events 47:04

4M ago47:04

47:04

Episode 125: In this episode of Critical Thinking - Bug Bounty Podcast Justin shares insights on how to succeed at live hacking events. We cover pre-event preparations, challenges of collaboration, on-site strategies, and the importance of maintaining a healthy mindset throughout the entire process. Follow us on twitter at: https://x.com/ctbbpodcas…

1
Instagram Principal Engineer (IC8) on Promotions, Breaking Prod, Tech Leading | Jake Bolam 50:25

5M ago50:25

50:25

Jake Bolam grew from Staff Eng (IC6) to Principal Eng (IC8) at Instagram. He had some hot takes about diff reviews and risk (he accepts diffs that’ll break prod). He also shared interesting stories about his promotions as well as many tips on how to have IC8 impact with a solid work life balance. We discuss: • Struggling initially at Facebook • His…

1
Episode 124: Bug Bounty Lifestyle = Less Hacking Time? 45:26

5M ago45:26

45:26

Episode 124: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph cover some news from around the community, hitting on Joseph’s Anthropic safety testing, Justin’s guest appearance on For Crying Out Cloud, and several fascinating tweets. Then they have a quick Full-time Bug Bounty check-in. Follow us on twitter at: https://x.…

1
OpenAI & Meta Distinguished Engineer (IC9) On Working With Zuck, Carmack & Career Growth | Philip Su 1:20:40

5M ago1:20:40

1:20:40

Philip Su grew to Distinguished Engineer (IC9) at Meta and OpenAI. He has a bunch of interesting stories about working with people like Zuck and John Carmack as well as a ton of advice for software engineers. I was really looking forward to chatting with him and enjoyed this conversation a lot. I hope you find it helpful! In this conversation, we d…

1
Episode 123: Hacking AI Series: Vulnus ex Machina - Part 2 44:12

5M ago44:12

44:12

Episode 123: In this episode of Critical Thinking - Bug Bounty Podcast we’re back with part 2 of Rez0’s miniseries. Today we talk about mastering Prompt Injection, taxonomy of impact, and both triggering traditional Vulns and exploiting AI-specific features. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free…

1
Episode 122: We Won Google's AI Hacking Event in Tokyo - Main Takeaways 1:45:30

5M ago1:45:30

1:45:30

Episode 122: In this episode of Critical Thinking - Bug Bounty Podcast your boys are MVH winners! First we’re joined by Zak, to discuss the Google LHE as well as surprising us with a bug of his own! Then, we sit down with Lupin and Monke for a winners roundtable and retrospective of the event. Follow us on twitter at: https://x.com/ctbbpodcast Got …

1
Episode 121: Slonser’s Image Injection 0-day -> ATO & New Caido Collab Plugin 57:27

5M ago57:27

57:27

Episode 121: In this episode of Critical Thinking - Bug Bounty Podcast we cover so much news and research that we ran out of room in the description... Follow us on X Shoutout to YTCracker for the awesome intro music! ====== Links ====== Follow Rhynorater and Rez0 on X: ====== Ways to Support CTBBPodcast ====== Hop on the CTBB Discord! We also have…

1
Industry Secrets We Wish We Knew Before Graduating | Staff Eng Talk @ UCLA 47:57

6M ago47:57

47:57

Ricky (Google Engineering Manager) and I were recently invited to give a talk at UCLA for the UPE/ACM clubs. We wanted to share the industry secrets that college didn’t teach us about the tech industry, career growth, and more. Students were able to submit questions in advance that we prepared slides for. We received a bunch of interesting question…

1
Episode 120: SpaceRaccoon - From Day Zero to Zero Day 1:36:57

6M ago1:36:57

1:36:57

Episode 120: In this episode of Critical Thinking - Bug Bounty Podcast Justin Gardner welcomes Eugene to talk (aka fanboy) about his new book, 'From Day Zero to Zero Day.' We walk through what to expect in each chapter, including Binary Analysis, Source and Sink Discovery, and Fuzzing everything.Then we give listeners a special deal on the book. Fo…

1
Episode 119: Abusing Iframes from a client-side hacker 33:54

6M ago33:54

33:54

Episode 119: In this episode of Critical Thinking - Bug Bounty Podcast Justin does a mini deep dive into the world of iframes, starting with why they’re significant, their attributes, and how to attack them. CORRECTION: Some of my comments on the latest episode of the pod were woefully inaccurate about the `csp` attribute of an iframe. Def should h…

1
21x Hackathon Winner Turned College Dropout | Jia Chen Interview 34:27

6M ago34:27

34:27

Jia Chen is a 21 year old that won 21x hackathons and co-founded her own startup, all while being a content creator. She’s worked hard to succeed in tech despite attending a non-target school, and has recently dropped out to work on her startup, Sprint.dev. We discuss: • Winning hackathon strategies • How to stand out as a college student • Content…

1
Episode 118: Hacking Happy Hour: 0days on Tap and SQLi Shots 58:29

6M ago58:29

58:29

Episode 118: In this episode of Critical Thinking - Bug Bounty Podcast we cover a host of news, including clientside tidbits, “Credentialless” iframes, prototype pollution, and what constitutes a polyglot in llms.txt. Follow us on X Shoutout to YTCracker for the awesome intro music! ====== Links ====== Follow Rhynorater and Rez0 on X ====== Ways to…

1
Episode 117: Hacking AI Series: Vulnus ex Machina - Part 1 32:20

7M ago32:20

32:20

Episode 117: In this episode of Critical Thinking - Bug Bounty Podcast Joseph introduces Vulus Ex Machina: A 3-part mini-series on hacking AI applications. In this part, he lays the groundwork and focuses on AI reconnaissance. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: i…

1
Episode 116: Auth Bypasses and Google VRP Writeups 26:48

7M ago26:48

26:48

Episode 116: In this episode of Critical Thinking - Bug Bounty Podcast Justin gives a quick rundown of Portswigger’s SAML Roulette writeup, as well as some Google VRP reports, and a Next.js middleware exploit. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthink…

1
Episode 115: Mentee to Career Hacker - Mokusou (So Sakaguchi) 1:40:58

7M ago1:40:58

1:40:58

Episode 115: In this episode of Critical Thinking - Bug Bounty Podcast Justin and So Sakaguchi sit down to walk through some recent bugs, before having a live mentorship session. They also talk about Reflector, and finish up by doing a bonus podcast segment in Japanese! Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestion…

1
Episode 114: Single Page Application Hacking Playbook 1:22:25

7M ago1:22:25

1:22:25

Episode 114: In this episode of Critical Thinking - Bug Bounty Podcast we’re diving into SPA and how to attack them.We also cover a host of news items, including some bug write-ups, AI updates, and a new tool called Hackadvisor. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here:…

1
Episode 113: Best Technical Takeaways from Portswigger Top 10 2024 1:29:19

8M ago1:29:19

1:29:19

Episode 113: In this episode of Critical Thinking - Bug Bounty Podcast we’re breaking down the Portswigger Top 10 from 2024. There’s some bangers in here! Follow us on X at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shoutout to YTCracker for the awesome intro mus…

1
Amazon Principal Engineer On Layoffs, Interviewing & Career Growth | Steve Huynh 1:18:48

8M ago1:18:48

1:18:48

Steve Huynh became a software engineer at Amazon with a Liberal Arts degree. He started as a Support Engineer and eventually became a Principal Engineer (top ~1% at Amazon) before starting his own career growth YouTube channel, A Life Engineered. We discuss: • Why most interview prep advice is garbage • Why most people don’t become Principal Engine…

1
Episode 112: Interview with Ciarán Cotter (MonkeHack) - Critical Lab Researcher and Full-time Hunter 1:07:37

8M ago1:07:37

1:07:37

Episode 112: In this episode of Critical Thinking - Bug Bounty Podcast Joseph Thacker is joined by Ciarán Cotter (Monke) to share his bug hunting journey and give us the rundown on some recent client-side and server-side bugs. Then they discuss WebSockets, SaaS security, and cover some AI news including Grok 3, Nuclei -AI Flag, and some articles by…

1
Episode 111: How to Bypass DOMPurify in Bug Bounty with Kevin Mizu 1:49:15

8M ago1:49:15

1:49:15

Episode 111: In this episode of Critical Thinking - Bug Bounty Podcast Justin interviews Kevin Mizu to showcase his knowledge regarding DOMPurify and its misconfigurations. We walk through some of Kevin’s research, highlighting things like Dangerous allow-lists and URI Attributes, DOMPurify hooks, node manipulation, and DOM Clobbering. Follow us on…