Mathias "Fall in a well" Karlsson - Bug Bounty Prophet (Ep. 50)

Episode 50: In this episode of Critical Thinking - Bug Bounty Podcast, Justin catches up with hacking master Mathias Karlsson, and talks about burnout, collaboration, and the importance of specialization. Then we dive into the technical details of MXSS and XSLT, character encoding, and give some predictions of what Bug Bounty might look like in the future…
Follow us on twitter at: @ctbbpodcast
Send us any feedback here: [e-mail]
Shoutout to YTCracker for the awesome intro music!
====== Links ======
Follow your hosts Rhynorater & Teknogeek on twitter:
====== Ways to Support CTBBPodcast ======
Sign up for Caido using the referral code CTBBPODCAST for a 10% discount.
Hop on the CTBB Discord!
We also do Discord subs at $25, $10, $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.
Today’s Guest
See ctbb.show/50 for show notes.
Timestamps:
(00:00:00) Introduction
(00:10:06) Automation Setup and Assetnote Origins
(00:16:49) Sharing Tips, and Content Creation
(00:22:27) Collaboration and Optimization
(00:36:44) Working at Detectify
(00:51:45) Bug Bounty Burnout
(00:56:15) Early Days of Bug Bounty and Future Predictions
(01:19:00) Nerdsnipeability
(01:29:38) MXSS and XSLT
(01:54:20) Learning through being wrong
(02:00:15) Go-to Vulns

[@MFoster392]

My second time watching this, Justin and Mathias are on another level man :-)

[@MFoster392]

Great information , thank you both it's awesome to hear some things i don't understand but i will know where to go back to in the future

[@richardsiyeni6985]

Thanks you so much for your content Sir. Its been a blessing, learning a lot of stuff.

[@WebWonders1]

Awsome Guy

[@kittoh_]

Awesome stuff man! Please don't stop your guests from sharing their secrets lol keep 'em coming!

[@odenko7680]

Yaw man, I really like the pods u guys doing, and the amount of knowledge u sharing both the host and the guest, keep the great work

[@iloiskihailm8710]

can someone explain to me the tip he's talk about at 16:21

[@brucelind3678]

Bounties should be priced based on risk instead of flat pricing. Larger companies have greater risk..

[@TheCyberWarriorGuy]

:)