In this episode, we're thrilled to be joined by renowned bug bounty hunter Shubs. We kick off with him sharing his journey from burgers to bugs, and how his friendly rivalry with a fellow hacker fueled his passion for reconnaissance, as well as his love of collaboration. We then shift gears to talk about the art of debugging, ethics and economics of bug bounty hunting, the transition to Entrepreneur, and the evolution of Assetnote from a reconnaissance tool to enterprise security software suite. This one’s a banger, and we don’t want you to miss it!
Follow us on Twitter at: / ctbbpodcast
We're new to this podcasting thing, so feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout to YTCracker for the awesome intro music!
====== Links ======
Follow your hosts Rhynorater & Teknogeek on twitter:
- / 0xteknogeek
- / rhynorater
Today’s Guest: / infosec_au
Intro Shoutouts
- / bebiksior
- cvssadvisor.com/
Assetnote
- www.assetnote.io/
- / assetnote
Bishop Fox: bishopfox.com/
Shortscan: github.com/bitquark/shortscan
XXE Payload: gist.github.com/Rhynorater/d0...
====== Timestamps ======
(00:00:00) Introduction
(00:05:48) History as a Hacker: Recon, rivalries, and Riot Games
(00:12:13) Collaboration and Community in Bug Bounty
(00:18:19) The Art of Debugging
(00:21:48) Assetnote News and overview
(00:29:31) CVE reversing
(00:31:46) Zero-day vulns
(00:41:36) Bug Bounty Ethics and Economics
(00:51:41) Bug Bounty and Entrepreneurship
(01:02:46) Business lessons learned
(01:06:36) Advice for Hunters looking to grow
(01:11:26) IIS Server Techniques