In this episode of Critical Thinking - Bug Bounty Podcast we talk with Jason Haddix (aka jhaddix) about his eclectic hacking techniques, Hacker to Hacker CISO life, and some crazy vulns he found. This episode is chock full of awesome tips so give it a good listen!

Follow us on twitter at: https://twitter.com/ctbbpodcast

We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io

Shoutout to YTCracker (https://twitter.com/realytcracker) for the awesome intro music!

====== Links ======

Follow your hosts Rhynorater & Teknogeek on twitter:
https://twitter.com/0xteknogeek
https://twitter.com/rhynorater

Follow JHaddix on Twitter: https://twitter.com/jhaddix
BuddoBot: https://buddobot.com/
BC Hunt: https://github.com/bugcrowd/HUNT/blob/master/README.md

One List For All: https://github.com/six2dez/OneListForAll

AssetNote Wordlists: https://wordlists.assetnote.io/
Backslash Powered Scanner: https://portswigger.net/bappstore/9cff8c55432a45808432e26dbb2b41d8

Jason’s Handy Dandy Acronyms:

SSWLR - Sensitive Secrets Were Leaked Recently
- Status
- Size
- Words
- Lines
- Response Time

COTS Software - Common Off-The-Shelf Software