Critical Thinking - Bug Bounty Podcast
Weekly bug bounty podcast by hackers for hackers, hosted by full-time hunters Justin Gardner and Joseph Thacker — technical write-up breakdowns, hunting tips and interviews with top researchers.
- Hosts
- Justin Gardner, Joseph Thacker
- Network
- Independent
- Status
- Active · since 2023
- Rating
- ★★★★☆ (4/5)
- Level
- Advanced
- Language
- English
Listen on
Weekly podcast "by hackers for hackers" hosted by full-time bug bounty hunters Justin Gardner (Rhynorater) and Joseph Thacker (Rez0). Running since 2023 with nearly 200 episodes, it covers bug bounty tips, write-up explanations and the latest hacking techniques, with a strong web application and AI security focus.
Who it's for
Bug bounty hunters, pentesters and application security engineers who want to sharpen their craft. It is most rewarding if you already read write-ups and know your way around web vulnerabilities such as XSS, SSRF or caching issues.
Who it's not for
Beginners looking for a gentle introduction to security, and listeners after news roundups or storytelling. Episodes assume technical background, are explicit, and often dig into individual bugs and tooling.
Key takeaways
- Both hosts hunt full time, so the discussion reflects what actually pays and what actually works in current programs rather than theory.
- Standout episodes include "Browser Logic Errors & XS-Leaks with Jorian Woltjer", "What Happened to HackerOne with Joel Margolis" and "Hackbot Proof-of-Concept Skill Creation".
- Recent episodes frequently cover AI-assisted hacking and AI security, a good way to follow where offensive work is heading.
Notes
Independent, with a community Discord and optional paid membership; the show is also on YouTube. Think of it as the offensive, hands-on counterpart to Darknet Diaries (stories) and Risky Business (news): same world, but squarely about finding bugs for a living.