Christian | Full-time Bug Bounty Hunter | Host @ctbbpodcast.bsky.social | Advisor @caido.io | 3x LHE MVH | 🗣️ English, 日本語https://bsky.app/profile/rhynorater.bsky.socialhttps://bsky.app/profile/rhynorater.bsky.social/post/3lcnl3kaqbk2oWe released our 100th episode of @ctbbpodcast.bsky.social yesterday - really proud of the whole CTBB team! We're sad to be losing @teknogeek.io, but very hopeful for future of the pod! We're going to lean more into the discord community and keep producing HQ technical content in 2025.06 Dec 2024 16:11 +0000at://did:plc:aljoyc2uaggsvpi2oktxdf5h/app.bsky.feed.post/3lcnl3kaqbk2ohttps://bsky.app/profile/rhynorater.bsky.social/post/3lcnjc6dmls2oYo, new big thing: Shift. AI seamlessly integrated into your HTTP proxy. Use cases: "Take this JS and build the JSON request body" "Fill in these IDs from my notes - UserA" "Create a match and replace rule to turn on this feature flag" "Generate a wordlist with all HTTP Verbs"06 Dec 2024 15:38 +0000at://did:plc:aljoyc2uaggsvpi2oktxdf5h/app.bsky.feed.post/3lcnjc6dmls2ohttps://bsky.app/profile/rhynorater.bsky.social/post/3lbwzer66au25I talk about this on the pod all the time, but CSRF is dead simple. You just need to know the conditions. I'm not gonna recite them again here, but today a new condition came up: No Content-Type header -> no CSRF restrictions Same-site: None POST = CSRF The research:27 Nov 2024 16:55 +0000at://did:plc:aljoyc2uaggsvpi2oktxdf5h/app.bsky.feed.post/3lbwzer66au25https://bsky.app/profile/rhynorater.bsky.social/post/3lbwsyauc6k2aAlright, new platform so I'm going to start sharing some things that I'm excited about to keep the momentum flowing! Rn, I think the 403 Bypasser Caido plugin from Bebiks is freaking amazing. This is a tool to automate the bypassing of walled-off endpoints. This plugin does 3 things right:27 Nov 2024 15:01 +0000at://did:plc:aljoyc2uaggsvpi2oktxdf5h/app.bsky.feed.post/3lbwsyauc6k2ahttps://bsky.app/profile/rhynorater.bsky.social/post/3lbwrzcx4b22aGreat times with these gents [contains quote post or other embedded content]27 Nov 2024 14:43 +0000at://did:plc:aljoyc2uaggsvpi2oktxdf5h/app.bsky.feed.post/3lbwrzcx4b22ahttps://bsky.app/profile/rhynorater.bsky.social/post/3lbwmlt7omu27Really sick research here [contains quote post or other embedded content]27 Nov 2024 13:06 +0000at://did:plc:aljoyc2uaggsvpi2oktxdf5h/app.bsky.feed.post/3lbwmlt7omu27https://bsky.app/profile/rhynorater.bsky.social/post/3lbwmcebomm27Kinda came kicking and screaming to this app at the thought of having another app to open and post too, but I'm gonna give it a shot to see how the community is!27 Nov 2024 13:01 +0000at://did:plc:aljoyc2uaggsvpi2oktxdf5h/app.bsky.feed.post/3lbwmcebomm27