Скачать или смотреть Getting ANSI about Unicode Normalization (Ep. 103)

Episode 103: In this episode of Critical Thinking - Bug Bounty Podcast Justin and Joseph delve into the vulnerabilities associated with ANSI codes and large language models (LLMs), as well as talk through some research about _json Juggling, cookie handling quirks, and the value of micro-blogging in general.

Follow us on twitter at:   / ctbbpodcast  

We're new to this podcasting thing, so feel free to send us any feedback here: [email protected]

Shoutout to   / realytcracker   for the awesome intro music!

====== Links ======
Follow your hosts Rhynorater & Teknogeek on twitter:
  / 0xteknogeek  
  / rhynorater  

====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

Check out our new SWAG store at https://ctbb.show/swag!

Join our Shift waitlist!
https://shiftwaitlist.com/

Today’s Sponsor - ThreatLocker. Check out their Elevation Control! https://www.criticalthinkingpodcast.i...

Resources:
_json Juggling Attack
https://nastystereo.com/security/rail...

Cross-Site POST Requests Without a Content-Type Header
https://nastystereo.com/security/cros...

Worst Fit
https://worst.fit/#

Orange Tsai on Worst Fit
https://worst.fit/assets/EU-24-Tsai-W...

Handling Cookies is a Minefield
https://grayduck.mn/2024/11/21/handli...

Terminal DiLLMa
https://embracethered.com/blog/posts/...

XS-Leaking flags with CSS: A CTFd 0day
https://jorianwoltjer.com/blog/p/hack...

Hacking Back the AI-Hacker
https://arxiv.org/html/2410.20911v1?u...

Johann Computer use demo
https://embracethered.com/blog/posts/...

How I Became The Most Valuable Hacker
https://douglas.day/2024/12/13/HowIBe...

Timestamps
(00:00:00) Introduction
(00:01:39) _json Juggling Attack and Cross-Site POST Requests Without a Content-Type Header
(00:10:55) Worst Fit and Unicode Mapping
(00:20:08) Handling Cookies is a Minefield
(00:28:11) Terminal DiLLMa
(00:34:41) CTFd 0day
(00:41:18) Hacking Back the AI-Hacker
(00:47:30) Becoming Most Valuable Hacker