Critical Thinking - Bug Bounty Podcast

Useful links:
- Our Discord: ctbb.show/discord-pinned
- Our Critical Thinkers Tier (MasterClasses, Exclusive Tools, 0-day -> bug bounty services, MUCH more): ctbb.show/cters-pinned
- Our Full-time Bug Hunter's Guild (application only): ctbb.show/fthg-pinned

Here are some tips from episode 199 on hacking with AI agents!

- An agent saying something is safe or unhackable shouldn't be the end of it, long-running agents get stuck on one idea. We can spin up a fresh one, hand it the first one's notes and ask if it agrees... Or just check it yourself, stop being lazy!
- Weird binary protocols get way less scary if we give it the spec and the implementation side by side, since it probably knows the spec better than we do and the differences are where the bugs hide, so we can use human reasoning on the comparison the AI made
- "Find all the bugs" and such usually brings garbage, so a narrow job works better. Go narrow
- Telling it how we think something works and asking it to confirm or deny beats asking for answers, since that's how we actually learn the architecture and start pointing it at the right spots
- Short dupe windows reward speed more than depth, everyone's agents are reading the same code, so we can grab the easy bugs first and try the fancy chains later

Hardware Hackalong starting in about an hour!

Hackalongs are a Critical Thinker tier subscriber exclusive event. (=

Join us at discord.gg/ctbb

Here's a new way to make money in bug bounty: Intigriti's CrowdRecon pays researchers for their recon data on targets.

Even if you haven't found a bug, you can still put that data to some good use! (=

Join the waitlist here:
criticalthinkingpodcast.io/Intigriti-Crow…

This is how gr3pme leverages smaller AI models to hack more efficiently