Bug Bounty JP Podcast

Bug Bounty JP Podcast (BBJP_Podcast)バグバウンティなどを対象にバグハントすることが趣味なメンバーによるセキュリティ雑談のポッドキャスト (ハッシュタグ: #BBJP_Podcast )

Bug Bounty JP Podcast is a technology podcast hosted by morioka12, with 16 episodes on record and a Required Pod Score of 80. PitchCentric scores this show on Booking Probability, Listen Score, and live audience signals refreshed every 24 hours.

morioka12 hosts Bug Bounty JP Podcast, a technology show with 16 episodes published.

Our AI reads these to draft pitches. Use them as grounding for a pitch that cites a real guest and a specific topic.

• 

  Bug Bounty JP Podcast

  BBJP_Podcast #16 (ゲスト回)

  Jun 10, 202557 minS0

  <p>【Episode 16】</p><p></p><p>▼News</p>ブログ企画でインタビューを実施しました！「⁠日本人バグハンター11人に聞いた！バグバウンティの魅力や面白さについて⁠」Spotify等の媒体で、エピソードの概要欄にタイムスタンプを導入しました！<p></p><p>▼Speakers</p>morioka12 (⁠⁠⁠@scgajge12⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)mokusou (⁠⁠⁠@Mokusou4⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)RyotaK (⁠⁠⁠@ryotkak⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)guest: taise (@1_am_nek0)<p></p><p>▼Summary (Timestamp, Link)</p>(01:22) ①最近の取り組みについて(01:33) mokusou⁠Meta Bug Bounty Researcher Conference⁠(07:24) RyotaK⁠Meta Bug Bounty Researcher ConferenceMost Impact Award⁠Meta Bug Bounty Leaderboard⁠ (5th)(15:49) morioka12Hack Fes. 2025 「バグバウンティ入門」(17:36) taise⁠Meta Bug Bounty Researcher Conference良い話：バグバウンティへのマインド「諦めの良さと悪さについて」「気合いの積み重ねが大事」「バグハンターの成長」(49:45) ②トレンドの出来事や脆弱性についてなどNahamCon2025Pwn2Own BerlinGitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden PromptsClient-side RCE via improper URL parsing in Google Web Designer for Windows: CVE-2025-4613

  ListenShow Notes
• 

  Bug Bounty JP Podcast

  BBJP_Podcast #15

  May 2, 20251 hourS0

  <p>【Episode 15】</p><p></p><p>▼News</p>ブログ企画でインタビューを実施しました！「⁠日本人バグハンター11人に聞いた！バグバウンティの魅力や面白さについて⁠」Spotify等の媒体で、エピソードの概要欄にタイムスタンプを導入しました！<p></p><p>▼Speakers</p>morioka12 (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@scgajge12⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)mokusou (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@Mokusou4⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)RyotaK (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@ryotkak⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)<p></p><p>▼Summary (Timestamp, Link)</p>(00:27) ①最近の取り組みについて(00:33) mokusou⁠Meta Bug Bounty Researcher Conference⁠(05:09) RyotaK⁠Meta Bug Bounty Researcher Conference⁠⁠SECCON 13 CTF Final 作問記⁠(12:17) morioka12⁠日本人バグハンター11人に聞いた！バグバウンティの魅力や面白さについて⁠(23:00) ②トレンドの出来事や脆弱性についてなど(23:38) ⁠How I made $64k from deleted files — a bug bounty story⁠(28:35) ⁠Escalating Impact: Full Account Takeover in Microsoft via XSS in Login Flow⁠(32:05) Self XSS, iframe(34:36) ⁠React Router and the Remix’ed path⁠(35:37) ③リスナーからの質問回答 (Q&A)(37:29) Q. 正規表現やサニタイズ周りの学習法、XSSの探し方について(46:08) Q. DOM Based XSSなどのDOMに関する脆弱性の探し方について(48:18) RyotaK流のコードリーディング<p></p><p>▼Survery (Question Form)</p>⁠https://forms.gle/wkr2jkc3m9o8NhPk7⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠BBJP_Podcast で話して欲しいテーマや聞きたいことなどを Google Form で募集しています！<p></p><p>▼Official Information</p>⁠Web Pages⁠X: ⁠@BBJPPodcast⁠hashtag: #BBJP_Podcast<p></p>

  ListenShow Notes
• 

  Bug Bounty JP Podcast

  BBJP_Podcast #14

  Mar 30, 20251h 21mS0

  <p>【Episode 14】</p><p>Speakers</p>morioka12 (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@scgajge12⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)mokusou (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@Mokusou4⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)RyotaK (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@ryotkak⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)<p>Summary (Linkのみ)</p>[大テーマ] 最近の取り組みについてBurp Suite Extension "Autorize" - https://github.com/Quitten/Autorize/Web Security Auditing Toolkit "Caido" - https://caido.io/Caido Plugin "CaidoReflector" - https://github.com/bebiksior/CaidoReflectorCaido Plugin "ui-kit" - https://x.com/caidoio/status/1904542918641160441Caido Plugin "devtools" - https://github.com/caido-community/devtoolsCaido Plugin "ParamFinder" - https://github.com/bebiksior/ParamFinderCaido Plugin "Shift" - https://shiftplugin.com/HTTPS Proxy "mitmproxy" - https://mitmproxy.org/ - https://github.com/mitmproxy/mitmproxySECCON CTF 13 Finals "not-that-short Challenge": creator RyotaK - https://x.com/ryotkak/status/1897299540598006249Critical Thinking - Bug Bounty Podcast "Ep 115": guest mokusou - https://youtu.be/zELFGXP6oeAP3NFST 2025 Winter "開催レポート" - https://issuehunt.jp/events/2025/winter/news/thanksP3NFEST 2025 Winte "コードから探す脆弱性": by RyotaK

  ListenShow Notes
• 

  Bug Bounty JP Podcast

  BBJP_Podcast #13 (1周年記念回&ゲスト回)

  Feb 27, 20251h 14mS0

  <p>【1周年記念回 & ゲスト回】</p><p>Speakers</p>morioka12 (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@scgajge12⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)mokusou (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@Mokusou4⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)RyotaK (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@ryotkak⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)ゲスト：Masato Kinugawa (@kinugawamasato)<p>Summary (Linkのみ)</p>[大テーマ] 最近の取り組みについてAutomated Mobile App Security⁠https://oversecured.com/Achieving RCE in famous Japanese chat tool with an obsolete Electron featurehttps://flatt.tech/research/posts/escaping-electron-isolation-with-obsolete-feature/Leaderboard | Google Bug Huntershttps://bughunters.google.com/leaderboardP3NFEST 2025 Winterhttps://issuehunt.jp/events/2025/winter/p3nfest[中テーマ] トレンドの出来事や脆弱性についてなどExploring the DOMPurify library: Hunting for Misconfigurations (2/2)https://mizu.re/post/exploring-the-dompurify-library-hunting-for-misconfigurationsZero Day Initiative - Announcing Pwn2Own Berlin and Introducing an AI Categoryhttps://www.zerodayinitiative.com/blog/2025/2/24/announcing-pwn2own-berlin-2025Top 10 web hacking techniques of 2024https://portswigger.net/research/top-10-web-hacking-techniques-of-2024Leaking the email of any YouTube user for $10,000https://brutecat.com/articles/leaking-youtube-emailsDecoding Google: Converting a Black Box to a White Box

  ListenShow Notes
• 

  Bug Bounty JP Podcast

  BBJP_Podcast #12

  Feb 5, 20251h 2mS0

  <p>Speakers</p> morioka12 (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@scgajge12⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠) mokusou (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@Mokusou4⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠) RyotaK (⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@ryotkak⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠) <p>Summary (Linkのみ)</p> [大テーマ] 最近の取り組みについて Meta Bug Bounty scope ⁠https://bugbounty.meta.com/scope/⁠ https://x.com/NahamSec/status/1873779040693231680 Clone2Leak: Your Git Credentials Belong To Us https://flatt.tech/research/posts/clone2leak-your-git-credentials-belong-to-us/ https://github.com/git/git/security/advisories/GHSA-2hvf-7c8p-28fx https://github.com/gogs/gogs https://github.com/go-gitea/gitea DUMANGキーボード 再配置可能なマグネット付きメカニカルキーボード https://akizukidenshi.com/catalog/g/g114963/ [中テーマ] トレンドの出来事や脆弱性についてなど Wiz Research Uncovers Exposed DeepSeek Database Leaking Sensitive Information, Including Chat History https://www.wiz.io/blog/wiz-research-uncovers-exposed-deepseek-database-leak Attacks on Maven proxy repositories https://github.blog/security/vulnerability-research/attacks-on-maven-proxy-repositories/ Stealing HttpOnly cookies with the cookie sandwich technique https://portswigger.net/research/stealing-httponly-cookies-with-the-cookie-sandwich-technique WorstFit: Unveiling Hidden Transformers in Windows ANSI! https://blog.orange.tw/posts/2025-01-worstfit-unveiling-hidden-transforme

  ListenShow Notes

Based on semantic analysis of episode topics and host coverage, this show is a strong guest fit for executives in:

Industry fit is computed by PitchCentric using vector embeddings of the show's episode catalog.