Episode 123: In this episode of Critical Thinking - Bug Bounty Podcast we’re back with part 2 of Rez0’s miniseries. Today we talk about mastering Prompt Injection, taxonomy of impact, and both triggering traditional Vulns and exploiting AI-specific features.
Follow us on twitter at: https://x.com/ctbbpodcast
Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io
Shoutout to YTCracker for the awesome intro music!
====== Links ======
Follow your hosts Rhynorater and Rez0 on Twitter:
====== Ways to Support CTBBPodcast ======
Hop on the CTBB Discord at https://ctbb.show/discord!
We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.
You can also find some hacker swag at https://ctbb.show/merch!
Today’s Sponsor - ThreatLocker User Store
https://www.criticalthinkingpodcast.io
/tl-userstore
====== This Week in Bug Bounty ======
Earning a HackerOne 2025 Live Hacking Invite
https://www.hackerone.com/blog/earning-hackerone-2025-live-hacking-invite
HTTP header hacks: basic and advanced exploit techniques explored
https://www.yeswehack.com/learn-bug-bounty/http-header-exploitation
====== Resources ======
https://vercel.com/blog/migrating-grep-from-create-react-app-to-next-js
Gemini 2.5 Pro prompt leak
https://x.com/elder_plinius/status/1913734789544214841
Pliny's CL4R1T4S
https://github.com/elder-plinius/CL4R1T4S
O3
https://x.com/pdstat/status/1913701997141803329
====== Timestamps ======
(00:00:00) Introduction
(00:05:25) Grep.app, O3, and Gemini 2.5 Pro prompt leak
(00:11:09) Delivery and impactful action
(00:20:44) Mastering Prompt Injection
(00:30:36) Traditional vulns in Tool Calls, and AI Apps
(00:37:32) Exploiting AI specific features
Popular Podcasts
NFL Daily with Gregg Rosenthal
Gregg Rosenthal and a rotating crew of elite NFL Media co-hosts, including Patrick Claybon, Colleen Wolfe, Steve Wyche, Nick Shook and Jourdan Rodrigue of The Athletic get you caught up daily on all the NFL news and analysis you need to be smarter and funnier than your friends.
On Purpose with Jay Shetty
I’m Jay Shetty host of On Purpose the worlds #1 Mental Health podcast and I’m so grateful you found us. I started this podcast 5 years ago to invite you into conversations and workshops that are designed to help make you happier, healthier and more healed. I believe that when you (yes you) feel seen, heard and understood you’re able to deal with relationship struggles, work challenges and life’s ups and downs with more ease and grace. I interview experts, celebrities, thought leaders and athletes so that we can grow our mindset, build better habits and uncover a side of them we’ve never seen before. New episodes every Monday and Friday. Your support means the world to me and I don’t take it for granted — click the follow button and leave a review to help us spread the love with On Purpose. I can’t wait for you to listen to your first or 500th episode!
Dateline NBC
Current and classic episodes, featuring compelling true-crime mysteries, powerful documentaries and in-depth investigations. Follow now to get the latest episodes of Dateline NBC completely free, or subscribe to Dateline Premium for ad-free listening and exclusive bonus content: DatelinePremium.com