About this episode

The episode discusses the top 10 web hacking techniques of 2025 as listed by Portswigger.

Episode 163: In this episode of Critical Thinking - Bug Bounty Podcast It’s that time of year again! We’re looking at the Portswigger Research list of top 10 web hacking techniques of 2025. Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: info@criticalthinkingpodcast.io Shoutout to YTCracker for the awesome intro music! ====== Links ====== Follow your hosts Rhynorater, rez0 and gr3pme on X:  https://x.com/Rhynorater https://x.com/rez0__ https://x.com/gr3pme Critical Research Lab: https://lab.ctbb.show/   ====== Ways to Support CTBBPodcast ====== Hop on the CTBB Discord at https://ctbb.show/discord ! We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc. You can also find some hacker swag at https://ctbb.show/merch ! ====== Resources ====== Parser Differentials: When Interpretation Becomes a Vulnerability https://www.youtube.com/watch?v=Dq_KVLXzxH8 XSS-Leak: Leaking Cross-Origin Redirects https://blog.babelo.xyz/posts/cross-site-subdomain-leak/ Playing with HTTP/2 CONNECT…

People in this episode

Hosts: Justin Gardner, Joseph Thacker, Brandyn Murtagh

Topics covered

• web hacking
• security techniques
• Portswigger
• bug bounty
• technology

Keywords

• web hacking techniques
• Portswigger
• bug bounty
• security research
• technology

Mentioned in this episode

Organizations: Portswigger

More episodes of Critical Thinking - Bug Bounty Podcast

• Episode 171: Path-Scoped Cookie Hacks with Uppercase & Post-based Raw Protobuf XSS · April 23, 2026 · 23 min
• Episode 170: Claude Code + Tmux, Websockets, and Other Korea LHE Takeaways · April 16, 2026 · 33 min
• Episode 169: Attacking OAuth 2.1 · April 9, 2026 · 30 min
• Episode 168: XSSDoctor - Client-side Path Traversal Research · April 2, 2026 · 1h 36m
• Episode 167: Stealing Bugs with Valeriy Shevchenko · March 26, 2026 · 52 min
• Episode 166: Rez0’s Top Claude Skill Secrets · March 19, 2026 · 53 min

Explore listener stats, chart rankings, contacts and more on the Critical Thinking - Bug Bounty Podcast podcast page.