【1周年記念回 & ゲスト回】
Speakers
- morioka12 (@scgajge12)
- mokusou (@Mokusou4)
- RyotaK (@ryotkak)
- ゲスト:Masato Kinugawa (@kinugawamasato)
Summary (Linkのみ)
- [大テーマ] 最近の取り組みについて
- Automated Mobile App Security
- Achieving RCE in famous Japanese chat tool with an obsolete Electron feature
- https://flatt.tech/research/posts/escaping-electron-isolation-with-obsolete-feature/
- Leaderboard | Google Bug Hunters
- https://bughunters.google.com/leaderboard
- P3NFEST 2025 Winter
- https://issuehunt.jp/events/2025/winter/p3nfest
- [中テーマ] トレンドの出来事や脆弱性についてなど
- Exploring the DOMPurify library: Hunting for Misconfigurations (2/2)
- https://mizu.re/post/exploring-the-dompurify-library-hunting-for-misconfigurations
- Zero Day Initiative - Announcing Pwn2Own Berlin and Introducing an AI Category
- https://www.zerodayinitiative.com/blog/2025/2/24/announcing-pwn2own-berlin-2025
- Top 10 web hacking techniques of 2024
- https://portswigger.net/research/top-10-web-hacking-techniques-of-2024
- Leaking the email of any YouTube user for $10,000
- https://brutecat.com/articles/leaking-youtube-emails
- Decoding Google: Converting a Black Box to a White Box
- https://brutecat.com/articles/decoding-google
- NDevTK Writeup Blog
- https://ndevtk.github.io/writeups/
- 8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur
- https://labs.watchtowr.com/8-million-requests-later-we-made-the-solarwinds-supply-chain-attack-look-amateur/
- How We Hacked a Software Supply Chain for $50K
- https://www.landh.tech/blog/20250211-hack-supply-chain-for-50k/
- [Guest] Masato Kinugawa
- DiscordデスクトップアプリのRCE
- https://masatokinugawa.l0.cm/2020/10/discord-desktop-rce.html
- Cure53
- Cybozu Bug Bounty Point Cumulative Ranking
- https://x.com/CybozuBugBounty/status/1884799350666305794
- 世界最大規模のバグバウンティコンテスト・Pwn2Ownの魅力とは?
- https://flatt.tech/magazine/entry/20240404_pwn2own
- [Q&A] なし
Web Page
- https://bugbountyjppodcast.notion.site/Bug-Bounty-JP-Podcast-8bf1080383a54c4a8848f10bfeb874b3?pvs=4
Survery
- https://forms.gle/wkr2jkc3m9o8NhPk7
BBJP_Podcast で話して欲しいテーマや聞きたいことなどを Google Form で募集しています。
感想も X(Twitter)でハッシュタグ「#BBJP_Podcast」や Google Formでいただけると嬉しいです。