Skip to content

Instantly share code, notes, and snippets.

View ALiwoto's full-sized avatar
🚩
Trying to experience new things

ALi.w ALiwoto

🚩
Trying to experience new things
  • Earth. under the blue sky
  • 17:07 (UTC +03:30)
View GitHub Profile
@tool
class_name ProceduralBridge
extends Node3D
##############################
## EXPORT VARIABLES
##############################
@export var physics_server: bool = false:
set(value):
@hackermondev
hackermondev / research.md
Last active May 18, 2025 14:16
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

#version 300 es
#ifdef GL_FRAGMENT_PRECISION_HIGH
precision highp float;
#else
precision mediump float;
#endif
out vec4 fragColor;
uniform vec2 resolution;
uniform vec3 orientation;
<script>
class CustomEventStream {
constructor(url, headers) {
this.url = url;
this.headers = headers;
this.reader = null;
this.decoder = new TextDecoder("utf-8");
}
async start(callback) {
@tavallaie
tavallaie / secure_erase.sh
Last active February 26, 2025 06:08
**Secure Data Erasure Script (Bash)** This Bash script securely erases data from a specified device with random data, ensuring irrecoverability. Use with caution.
#!/bin/bash
# Check if the script is run with superuser privileges
if [ "$EUID" -ne 0 ]; then
echo "Please run this script as root (sudo)."
exit 1
fi
# Prompt the user for the target devices
read -p "Enter the target devices (e.g., /dev/sdX /dev/sdY): " target_devices
@rlapz
rlapz / fturing.c
Last active April 4, 2023 19:43
liburing exercise
/* compile: cc fturing.c -o fturing -luring -DNDEBUG -O3 */
#include <endian.h>
#include <errno.h>
#include <error.h>
#include <liburing.h>
#include <libgen.h>
#include <netdb.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
@ALiwoto
ALiwoto / QueraQuestion17675.cs
Created December 2, 2022 13:15
QueraQuestion17675
using System;
namespace CW1
{
public class QueraQuestion17675
{
static int previousFib = 0;
static int lastFib = 1;
public static void Main(string[] args)
{
@ALiwoto
ALiwoto / my_particles2d_01.gd
Last active June 19, 2022 02:04
A few examples of creating particles2D in godot using only gdscript
class_name MyParticles2D01
extends Particles2D
# Declare member variables here. Examples:
# var a = 2
# var b = "text"
# Called when the node enters the scene tree for the first time.
@infernoboy
infernoboy / SyncAppvPublishingServer.vbs
Last active December 12, 2023 20:04
Copied from a clean install of Windows 11
'---------------------------------------------------------------------------------------------
' Copyright: Microsoft Corp.
'
' This script is designed to be used only for scheduled tasks(s).
' There is no extensive error check, and will not dump the output from the Powershell CmdLet.
'
' Usage: SyncAppvPublishingServer {cmdline-args(passthrough to cmdlet)}
'---------------------------------------------------------------------------------------------
Option Explicit