https://www.spreaker.com/podcast/bug-bounty-reports-discussed--5073781enTechnologyCopyright Grzegorz Niedzielahttps://d3wo5wojvuv7l.cloudfront.net/t_rss_itunes_square_1400/images.spreaker.com/original/68348cf83d2c163f176e5d5c33503fb5.jpghttps://www.spreaker.com/podcast/bug-bounty-reports-discussed--5073781Tue, 10 Jun 2025 14:32:41 +0000Grzegorz NiedzielaGrzegorz Niedzielagreg@bugbountyexplained.comFrom Bug Bounty Reports Discussed podcast you can learn from the best bug bounty hunters in the world. I ask them about their methodologies, tools they use, the advice they give to beginners and many more... Subscribe to never miss an episode!falseepisodichttps://www.spreaker.com/episode/bug-bounty-tools-that-actually-land-bugs-with-arthur-aires--66494195
Some links mentioned in the video: https://github.com/pwntester/SerialKillerBypassGadgetCollection https://book.hacktricks.wiki/en/index.html https://portswigger.net/bappstore/e4e0f6c4f0274754917dcb5f4937bb9e https://portswigger.net/bappstore/594a49bb233748f2bc80a9eb18a2e08f https://portswigger.net/bappstore/0e61c786db0c4ac787a08c4516d52ccf https://github.com/PortSwigger/403-bypasser https://github.com/projectdiscovery/nuclei https://github.com/SeifElsallamy/Blind-XSS-Manager/tree/main https://github.com/trufflesecurity/xsshunter https://infosecwriteups.com/easy-xsshunter-discord-alerts-33fcff24a8f7 https://github.com/elkokc/reflector https://portswigger.net/burp/documentation/desktop/tools/dom-invader https://urlscan.io/

Timestamps:
00:00 Intro
01:30 Balancing part-time bug bounty with full-time job
02:56 Mixing manual bug bounty hunting with automation
22:04 The most useful Burp extensions
33:25 Fuzzing in bug bounty
46:34 Live Hacking Events]]>https://api.spreaker.com/episode/66494195Tue, 10 Jun 2025 14:30:00 +0000Grzegorz NiedzielaIn this podcast, my guest is Arthur Aires, part-time bug bounty hunter and cybersecurity pro from Brazil. He has an amazing approach that combines manual hacking with using a lot of tools for recon and fuzzing. Some links mentioned in the video:...
Some links mentioned in the video: https://github.com/pwntester/SerialKillerBypassGadgetCollection https://book.hacktricks.wiki/en/index.html https://portswigger.net/bappstore/e4e0f6c4f0274754917dcb5f4937bb9e https://portswigger.net/bappstore/594a49bb233748f2bc80a9eb18a2e08f https://portswigger.net/bappstore/0e61c786db0c4ac787a08c4516d52ccf https://github.com/PortSwigger/403-bypasser https://github.com/projectdiscovery/nuclei https://github.com/SeifElsallamy/Blind-XSS-Manager/tree/main https://github.com/trufflesecurity/xsshunter https://infosecwriteups.com/easy-xsshunter-discord-alerts-33fcff24a8f7 https://github.com/elkokc/reflector https://portswigger.net/burp/documentation/desktop/tools/dom-invader https://urlscan.io/

Timestamps:
00:00 Intro
01:30 Balancing part-time bug bounty with full-time job
02:56 Mixing manual bug bounty hunting with automation
22:04 The most useful Burp extensions
33:25 Fuzzing in bug bounty
46:34 Live Hacking Events]]>3317false122fullhttps://www.spreaker.com/episode/the-mindset-for-finding-highs-and-crits-in-bug-bounty-with-jr0ch17--66085130https://api.spreaker.com/episode/66085130Wed, 14 May 2025 13:57:13 +0000Grzegorz NiedzielaInterview with Jasmin “JR0ch17” Landry, a former triager and security manager, now a full-time bug bounty hunter. We discuss bug bounty strategy, mindset, and finding high and critical vulnerabilities.4345false121fullhttps://www.spreaker.com/episode/how-to-become-an-xss-expert-with-renniepak--64837443https://api.spreaker.com/episode/64837443Wed, 12 Mar 2025 13:24:05 +0000Grzegorz NiedzielaThis video is an interview with René de Sain, known as renniepak. We talk about XSS, CSP bypasses, privilege escalation, speeding up the workflow with tricks like JS bookmarks and we discuss if there's such thing as bug bounty methodology.3232false120fullhttps://www.spreaker.com/episode/from-0-to-a-top-bug-bounty-hunter-johan-carlsson-s-journey-to-gitlab-top1-on-hackerone--63782504https://api.spreaker.com/episode/63782504Tue, 21 Jan 2025 14:08:13 +0000Grzegorz NiedzielaThis episode is the interview with Johan Carlsson, a full-time bug bounty hunter who specialises in client-side bugs and is currently the TOP1 hunter on GitLab.4721false119fullhttps://www.spreaker.com/episode/finding-criticals-on-well-tested-targets-victor-doomerhunter-poucheret--63446798https://api.spreaker.com/episode/63446798Mon, 23 Dec 2024 12:12:58 +0000Grzegorz NiedzielaThis video is my interview with a full-time bug bounty hunter that had a great success at recent Live Hacking Events - Victor “doomerhunter” Poucheret. We're talking about his bug bounty methodology, choosing a bug bounty program, tools and much more.5430false118fullhttps://www.spreaker.com/episode/how-not-to-get-stuck-when-learning-web-security-louis-nyffenegger-from-pentesterlab--62639537https://api.spreaker.com/episode/62639537Wed, 06 Nov 2024 13:20:29 +0000Grzegorz NiedzielaIn this interview, I'm talking with Louis Nyffenegger who's been teaching people websecurity since 13 years by creating Pentesterlab - web security learning platform, as well as by giving multiple talks and guiding people through their careers.3316false117fullhttps://www.spreaker.com/episode/going-full-time-bug-bounty-privilege-escalation-bugs-and-more-with-douglas-day--61037958✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Douglas on Twitter: https://twitter.com/ArchAngelDDay
In this interview, we're talking with Douglas Day about his bug hunting methodlogy, about quitting his job to become a full-time bug bounty hunter and many more.
BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4 
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk 
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Timestamps:
00:00 Intro
0:29 Going full-time bug bounty
9:12 Douglas' bug bounty methodology
28:13 Bug Bounty tools you need
43:04 The benefits of collaboration in bug bounty
54:23 How to deal with having a similar bug on many endpoints?
1:11:37 How to select a bug bounty program?]]>https://api.spreaker.com/episode/61037958Thu, 15 Aug 2024 13:26:39 +0000Grzegorz Niedziela📧 Subscribe to BBRE Premium: https://bbre.dev/premium ✉️ Sign up for the mailing list: https://bbre.dev/nl 📣 Follow me on Twitter: https://bbre.dev/tw 📣 Follow Douglas on Twitter: https://twitter.com/ArchAngelDDay In this interview, we're talking with...✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Douglas on Twitter: https://twitter.com/ArchAngelDDay
In this interview, we're talking with Douglas Day about his bug hunting methodlogy, about quitting his job to become a full-time bug bounty hunter and many more.
BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4 
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk 
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Timestamps:
00:00 Intro
0:29 Going full-time bug bounty
9:12 Douglas' bug bounty methodology
28:13 Bug Bounty tools you need
43:04 The benefits of collaboration in bug bounty
54:23 How to deal with having a similar bug on many endpoints?
1:11:37 How to select a bug bounty program?]]>5476false116fullhttps://www.spreaker.com/episode/finding-criticals-in-mobile-apps-joel-margolis-0xteknogeek-from-the-critical-thinking-bug-bounty-podcast--60787946✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Joel on Twitter: https://x.com/0xteknogeek
In this interview, we're talking with Joel about bug bounty hunting on mobile apps, about being a program manager, about Live Hacking Events and more.

BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4 
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk 
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Links mentioned during the interview:
https://www.timeshifter.com
https://codeshare.frida.re/@teknogeek/android-universal-ssl-unpin/
https://gitlab.com/newbit/rootAVD
https://github.com/Ch0pin/medusa
https://github.com/teknogeek/get_schemas
Timestamps:
00:00 Intro
00:22 Getting into bug bounty
11:04 Live Hacking Events
24:58 Mobile bug bounty
48:34 Lessons from being a bug bounty program manager
1:03:54 The plans for the Critical Thinking Bug Bounty podcast
]]>https://api.spreaker.com/episode/60787946Wed, 24 Jul 2024 13:19:08 +0000Grzegorz Niedziela📧 Subscribe to BBRE Premium: https://bbre.dev/premium ✉️ Sign up for the mailing list: https://bbre.dev/nl 📣 Follow me on Twitter: https://bbre.dev/tw 📣 Follow Joel on Twitter: https://x.com/0xteknogeek In this interview, we're talking with Joel about...✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Joel on Twitter: https://x.com/0xteknogeek
In this interview, we're talking with Joel about bug bounty hunting on mobile apps, about being a program manager, about Live Hacking Events and more.

BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4 
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk 
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Links mentioned during the interview:
https://www.timeshifter.com
https://codeshare.frida.re/@teknogeek/android-universal-ssl-unpin/
https://gitlab.com/newbit/rootAVD
https://github.com/Ch0pin/medusa
https://github.com/teknogeek/get_schemas
Timestamps:
00:00 Intro
00:22 Getting into bug bounty
11:04 Live Hacking Events
24:58 Mobile bug bounty
48:34 Lessons from being a bug bounty program manager
1:03:54 The plans for the Critical Thinking Bug Bounty podcast
]]>4132false115fullhttps://www.spreaker.com/episode/the-secret-to-finding-many-criticals-alex-chapman--60502262✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Alex on Twitter: https://x.com/ajxchapman
In this episode I'm interviewing Alex Chapman - a full-time bug bounty hunter known for finding many high-impact bugs and very little medium and low-impact ones.

BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4 
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk 
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Timestamps:
00:00 Intro
0:22 How did Alex start with cybersecurity and bug bounty?
3:05 Alex' uique hacking style
19:18 Source code review tips
28:37 How to write a good bug bounty report?
45:52 Finding bugs in desktop applications
52:15 LHEs
1:00:57 Live of a full-time bug bounty hunter
]]>https://api.spreaker.com/episode/60502262Tue, 25 Jun 2024 12:25:36 +0000Grzegorz Niedziela📧 Subscribe to BBRE Premium: https://bbre.dev/premium ✉️ Sign up for the mailing list: https://bbre.dev/nl 📣 Follow me on Twitter: https://bbre.dev/tw 📣 Follow Alex on Twitter: https://x.com/ajxchapman In this episode I'm interviewing Alex Chapman - a...✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Alex on Twitter: https://x.com/ajxchapman
In this episode I'm interviewing Alex Chapman - a full-time bug bounty hunter known for finding many high-impact bugs and very little medium and low-impact ones.

BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4 
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk 
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Timestamps:
00:00 Intro
0:22 How did Alex start with cybersecurity and bug bounty?
3:05 Alex' uique hacking style
19:18 Source code review tips
28:37 How to write a good bug bounty report?
45:52 Finding bugs in desktop applications
52:15 LHEs
1:00:57 Live of a full-time bug bounty hunter
]]>4593false114fullhttps://www.spreaker.com/episode/how-i-got-into-cybersecurity-and-bug-bounty--58674083https://api.spreaker.com/episode/58674083Tue, 13 Feb 2024 15:02:50 +0000Grzegorz NiedzielaIn this episode, I'm talking about my story of getting into cybersecurity - what got me interested, how I became a pentester, what motivated my to create my channel and finally, how I became a bug bounty hunter.2288false113fullhttps://www.spreaker.com/episode/find-more-clients-and-improve-in-pentesting-cristi-vlad--58240841https://api.spreaker.com/episode/58240841Tue, 09 Jan 2024 15:14:22 +0000Grzegorz NiedzielaIn this episode of the podcast, I'm interviewing Cristi Vlad about bug bounty and pentesting - the differences, ways to build your network of clients, continuous learning and more.4338false112fullhttps://www.spreaker.com/episode/all-you-need-to-know-about-being-a-full-time-bug-bounty-hunter-justin-rhynorater-gardner--57747839https://api.spreaker.com/episode/57747839Tue, 21 Nov 2023 13:05:23 +0000Grzegorz NiedzielaIn this episode of the podcast, I interview Justin Gardner, the host of the Critical Thinking Bug Bounty Podcast who's been a full-time hunter for about 4 years. We talk about his methodology, tooling and many more!4892false111fullhttps://www.spreaker.com/episode/ai-and-hacking-opportunities-and-threats-joseph-rez0-thacker--57321996📖 Check out AppSecEngineer, the sponsor of today's video: https://www.appsecengineer.com
📣 Follow GUEST on Twitter: https://twitter.com/@rez0
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
In this interview we are discussing with rez0 a range of topics around AI - the new vulnerability opportunities it created, how can I help us in hacking and if it will replace us in the future.
Resources and people mentioned in the podcast:
https://olickel.com/everything-i-know-about-prompting-llms
https://www.anthropic.com/index/prompting-long-context
https://simonwillison.net
https://llm-attacks.org/zou2023universal.pdf
http://llm-attacks.org
BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Timestamps:
00:00 Intro
00:32 Check out AppSecEngineer, the sponsor of this podcast
01:36 rez0's regular bug bounty hacking style
22:39 AI and hacking]]>https://api.spreaker.com/episode/57321996Fri, 20 Oct 2023 15:39:42 +0000Grzegorz Niedziela📧 Subscribe to BBRE Premium: https://bbre.dev/premium 📖 Check out AppSecEngineer, the sponsor of today's video: https://www.appsecengineer.com 📣 Follow GUEST on Twitter: https://twitter.com/@rez0 ✉️ Sign up for the mailing list: https://bbre.dev/nl 📣...📖 Check out AppSecEngineer, the sponsor of today's video: https://www.appsecengineer.com
📣 Follow GUEST on Twitter: https://twitter.com/@rez0
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
In this interview we are discussing with rez0 a range of topics around AI - the new vulnerability opportunities it created, how can I help us in hacking and if it will replace us in the future.
Resources and people mentioned in the podcast:
https://olickel.com/everything-i-know-about-prompting-llms
https://www.anthropic.com/index/prompting-long-context
https://simonwillison.net
https://llm-attacks.org/zou2023universal.pdf
http://llm-attacks.org
BBRD podcast is also available on most popular podcast platforms:
https://open.spotify.com/show/6tLoJ5foOoZPPELwrHPBO4
https://podcasts.google.com/feed/aHR0cHM6Ly93d3cuc3ByZWFrZXIuY29tL3Nob3cvNTA3Mzc4MS9lcGlzb2Rlcy9mZWVk
https://podcasts.apple.com/us/podcast/bug-bounty-reports-discussed/id1583400215?uo=4

Timestamps:
00:00 Intro
00:32 Check out AppSecEngineer, the sponsor of this podcast
01:36 rez0's regular bug bounty hacking style
22:39 AI and hacking]]>5234false110fullhttps://www.spreaker.com/episode/from-reporting-self-xsses-to-improving-browser-security-mechanisms-michal-bentkowski--56712917https://api.spreaker.com/episode/56712917Wed, 06 Sep 2023 14:38:36 +0000Grzegorz NiedzielaIn this episode, I interview Michał Bentkowski who specializes in crazy XSS bugs and now works on improving security of the browsers at Google.5429false19fullhttps://www.spreaker.com/episode/the-key-to-succeed-in-bug-bounty-nahamsec--56228300https://api.spreaker.com/episode/56228300Wed, 26 Jul 2023 12:40:22 +0000Grzegorz NiedzielaIn this episode with @NahamSec we are talking about bug bounty. Ben has a unique insight into mistakes beginners make since he's the biggest content creator in the bug bounty space and gets asked a lot of questions. We are talking about his...4221false18fullhttps://www.spreaker.com/episode/road-to-most-valuable-hacker-and-working-while-travelling-the-world-yassine-aboukir--54523655https://api.spreaker.com/episode/54523655Tue, 27 Jun 2023 06:40:09 +0000Grzegorz NiedzielaIn this podcast, I interview Yassine Aboukir - the winner of Most Valuable Hacker award at H1-303 Live hacking event. We talk about his bug bounty methodology, bounty vs pentesting as well as travelling, digital nomad lifestyle and doing sports.4070false17fullhttps://www.spreaker.com/episode/security-source-code-review-expert-shubham-shah--54030613
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣Follow me on Twitter: https://bbre.dev/tw
📣 Follow Shubs on Twitter: http://twitter.com/infosec_au/


Timestamps:
00:00 Intro
00:18 Shubs' background
13:04 Choosing good targets for finding 0days
20:41 How to audit the source code?
33:34 Who should consider a career as a full-time bug bounty hunter?
38:04 Sharing knowledge and disclosing 0days
45:54 What skills does Shubs pay attention to when recruiting security researchers?
48:48 AI in security research]]>https://api.spreaker.com/episode/54030613Mon, 29 May 2023 12:49:34 +0000Grzegorz NiedzielaIn this podcast episode, I interview Shubham Shah - one of my biggest authorities in bug bounty space and expert in source code review who regularly finds 0days. 📧 Subscribe to BBRE Premium: https://bbre.dev/premium ✉️ Sign up for the mailing list:...
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣Follow me on Twitter: https://bbre.dev/tw
📣 Follow Shubs on Twitter: http://twitter.com/infosec_au/


Timestamps:
00:00 Intro
00:18 Shubs' background
13:04 Choosing good targets for finding 0days
20:41 How to audit the source code?
33:34 Who should consider a career as a full-time bug bounty hunter?
38:04 Sharing knowledge and disclosing 0days
45:54 What skills does Shubs pay attention to when recruiting security researchers?
48:48 AI in security research]]>3316bounty,bug,bugbounty,code,review,sourcefalse16fullhttps://www.spreaker.com/episode/inside-the-mind-of-the-top1-facebook-bug-bounty-hunter-youssef-sammouda--53727666https://api.spreaker.com/episode/53727666Wed, 03 May 2023 12:27:09 +0000Grzegorz NiedzielaIn this podcast, I interview Youssef Sammouda - top Facebook/Meta bug bounty hunter in 2020, 2021 and 2022. He has found numerous bugs on Facebook, including account takeovers. We talk about his methodology, tools he uses, productivity tips and many more!3999false15fullhttps://www.spreaker.com/episode/bug-bounty-automation-and-scaling-0days-michael-ness--53118689
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣Follow me on Twitter: https://bbre.dev/tw
📣 Follow Michael on Twitter: https://twitter.com/mikey96_bh
Check out Overcast Security: https://search.overcast-security.app]]>https://api.spreaker.com/episode/53118689Tue, 07 Mar 2023 09:31:49 +0000Grzegorz NiedzielaIn this podcast, I interview Michael Ness about bug bounty automation and scaling 0 days to get multiple payouts for a single bug. We also talk about how to make the automation better and about some tips to upcoming bug hunters. 📧 Subscribe to BBRE...
📧 Subscribe to BBRE Premium: https://bbre.dev/premium
✉️ Sign up for the mailing list: https://bbre.dev/nl
📣Follow me on Twitter: https://bbre.dev/tw
📣 Follow Michael on Twitter: https://twitter.com/mikey96_bh
Check out Overcast Security: https://search.overcast-security.app]]>2737bounty,bug,bugbountyfalse14fullhttps://www.spreaker.com/episode/from-zero-to-6-digit-bug-bounty-earnings-in-1-year-johan-carlsson--52550483✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Johan on Twitter: https://twitter.com/joaxcar
In this podcast I interview one of bug bounty hunters who started very recently but already is having a lot of success - Johan Carlsson. We talk about his hacking methodology, his journey with GitLab and his tips for bug bounty hunters.

🖥 Get $100 in credits for Digital Ocean: https://bbre.dev/do]]>https://api.spreaker.com/episode/52550483Fri, 27 Jan 2023 13:52:22 +0000Grzegorz Niedziela📧 Subscribe to BBRE Premium: https://bbre.dev/premium ✉️ Sign up for the mailing list: https://bbre.dev/nl 📣 Follow me on Twitter: https://bbre.dev/tw 📣 Follow Johan on Twitter: https://twitter.com/joaxcar In this podcast I interview one of bug bounty...✉️ Sign up for the mailing list: https://bbre.dev/nl
📣 Follow me on Twitter: https://bbre.dev/tw
📣 Follow Johan on Twitter: https://twitter.com/joaxcar
In this podcast I interview one of bug bounty hunters who started very recently but already is having a lot of success - Johan Carlsson. We talk about his hacking methodology, his journey with GitLab and his tips for bug bounty hunters.

🖥 Get $100 in credits for Digital Ocean: https://bbre.dev/do]]>4117false13fullhttps://www.spreaker.com/episode/accidentally-finding-a-50-000-vulnerability-augusto-zanellato-bug-bounty-reports-discussed-2--46754261
This podcast is an interview with Augusto Zanellato, the hacker who submitted report with a GitHub rest API token leaked which had access to Shopify's Github account. It was reported on Hackerone to Shopify and Augusto got $50,000 for it. The best thing is that he didn't even look for a security issue.

Link to the report explained: https://youtu.be/TOgIgD0KUVs
The report on Hackerone: https://hackerone.com/reports/1087489
Subscribe to Bug Bounty Reports Explained on YouTube: https://www.youtube.com/c/BugBountyReportsExplained/

Augusto's media:
https://twitter.com/auguzanellato
https://hackerone.com/augustozanellato?type=user
https://github.com/augustozanellato]]>https://api.spreaker.com/episode/46754261Thu, 30 Sep 2021 08:00:36 +0000Grzegorz Niedziela✉️ Sign up for the newsletter: https://mailing.bugbountyexplained.com/ This podcast is an interview with Augusto Zanellato, the hacker who submitted report with a GitHub rest API token leaked which had access to Shopify's Github account. It was...
This podcast is an interview with Augusto Zanellato, the hacker who submitted report with a GitHub rest API token leaked which had access to Shopify's Github account. It was reported on Hackerone to Shopify and Augusto got $50,000 for it. The best thing is that he didn't even look for a security issue.

Link to the report explained: https://youtu.be/TOgIgD0KUVs
The report on Hackerone: https://hackerone.com/reports/1087489
Subscribe to Bug Bounty Reports Explained on YouTube: https://www.youtube.com/c/BugBountyReportsExplained/

Augusto's media:
https://twitter.com/auguzanellato
https://hackerone.com/augustozanellato?type=user
https://github.com/augustozanellato]]>1575accidentaly,augusto,bbre,bounty,bug,critical,discussed,explained,finding,gh_token,github,hackerone,leak,lucky,podcast,reports,shopify,token,zanellatofalse12fullhttps://www.spreaker.com/episode/finding-bugs-in-google-vrp-without-recon-david-schutz-bbrd-01--46275893Original writeup: https://bugs.xdavidhu.me/google/2021/04/05/i-built-a-tv-that-plays-all-of-your-private-youtube-videos/

✉️ Sign up for the newsletter to receive the best hacking info right to your inbox: https://mailing.bugbountyexplained.com/

In this episode I interview David Schütz, the 19-years old Google VRP hacker who constantly finds bugs in functionalities we use often like private videos on YouTube. We talk about his career, learning process, methodology, tooling and many more aspects that might help beginner bug bounty hunters.]]>https://api.spreaker.com/episode/46275893Sat, 28 Aug 2021 15:21:06 +0000Grzegorz NiedzielaThe video with David's bug: https://youtu.be/miQvovD3c04 Original writeup: https://bugs.xdavidhu.me/google/2021/04/05/i-built-a-tv-that-plays-all-of-your-private-youtube-videos/ ✉️ Sign up for the newsletter to receive the best hacking info right to...Original writeup: https://bugs.xdavidhu.me/google/2021/04/05/i-built-a-tv-that-plays-all-of-your-private-youtube-videos/

✉️ Sign up for the newsletter to receive the best hacking info right to your inbox: https://mailing.bugbountyexplained.com/

In this episode I interview David Schütz, the 19-years old Google VRP hacker who constantly finds bugs in functionalities we use often like private videos on YouTube. We talk about his career, learning process, methodology, tooling and many more aspects that might help beginner bug bounty hunters.]]>3144bugbounty,googlebugbounty,googlevrp,hackinggooglefalse11full