Episode 197: 800 Bugs w/ DeepSeek + Local Model Hacks

Episode 197: In this episode of Critical Thinking - Bug Bounty Podcast Joseph, Brandyn, and Ads serve up some tips on how they’re using local AI Models and optimizing their hardware.

Follow us on twitter at: https://x.com/ctbbpodcast Got any ideas and suggestions? Feel free to send us any feedback here: [email protected] Shoutout to YTCracker for the awesome intro music!

====== Links ====== Follow your hosts Rhynorater, rez0 and gr3pme on X: https://x.com/Rhynorater https://x.com/rez0__ https://x.com/gr3pme

Critical Research Lab: https://lab.ctbb.show/

Need a Pentest? We just launched CTBB Pentests! https://pentest.ctbb.show/

Hack full time? Check out the Full-Time Hunter’s Guild! https://ctbb.show/fthg

====== Ways to Support CTBBPodcast ====== Hop on the CTBB Discord at https://ctbb.show/discord!

We also do Discord subs at $25, $10, and $5 - premium subscribers get access to private masterclasses, exploits, tools, scripts, un-redacted bug reports, etc.

You can also find some hacker swag at https://ctbb.show/merch!

Sponsored by Intigriti: Join the Waitlist for CrowdRecon! https://www.criticalthinkingpodcast.io/Intigriti-CrowdRecon

====== This Week in Bug Bounty ======

Join the H1 Researcher Community Hub on Discord https://discord.gg/PUhMwsTySt

====== Resources ======

Using Replay Pipelines https://docs.caido.io/app/guides/replay_test_race_conditions.html

Smashing the token limit with overlapping fragments https://portswigger.net/research/smashing-the-token-limit

Qwen3.8-Flash-Next-FP4-Local https://huggingface.co/nvidia/Qwen3.8-Flash-Next-FP4-Local

Prompt Rewriting Tweet https://x.com/cgtwts/status/2110571916973207906

Muse Spark Open https://huggingface.co/collections/meta-models/muse-spark-open

Stealth Bench https://stealthbench.com/

DreadIndex https://dreadnode.io/research/dreadindex/

Obliterated https://huggingface.co/OBLITERATUS/feyospace-s1-obliterated

DeepSeek-v4-Flash-DSpark-2x-DGX-Spark https://github.com/MiaAI-Lab/DeepSeek-v4-Flash-DSpark-2x-DGX-Spark

====== Timestamps ====== (00:00:00) Introduction (00:04:00) Bugs found with Deepseek (00:18:15) Caido Race Conditions & Pipeline Session (00:23:47) Free models in OpenCode, Reset months, and Overlapping Fragments (00:29:54) Local Models & Hardware Optimization (00:46:53) Verifiers & Reflections Agents (00:58:16) Ohmypi, Herdr and other Harnesses (01:09:20) Muse Spark Open & Stealth Bench, & DreadIndex (01:18:35) Keeping agents from fighting