R. Kürşat Vuruşan RKursatV

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

$ git checkout --orphan NEWBRANCH
$ git rm -rf .

--orphan creates a new branch, but it starts without any commit. After running the above command you are on a new branch "NEWBRANCH", and the first commit you create from this state will start a new history without any ancestry.

You can then start adding files and commit them and they will live in their own branch. If you take a look at the log, you will see that it is isolated from the original log.

	from PIL import Image
	from scipy.ndimage import gaussian_filter
	import numpy
	import pytesseract
	from PIL import ImageFilter

	def solve_captcha(filename):
	# thresold1 on the first stage
	th1 = 140
	th2 = 140 # threshold after blurring


	flame='\xF0\x9F\x94\xA5' #🔥
	snow='\xE2\x9D\x84 ' # ❄
	gear='\xE2\x9A\x99\xEF\xB8\x8F'

	ignis_color='048'
	SEGMENT_SEPARATOR=$'\ue0b0'

	prompt_segment() {
	local bg fg

	cd ~/Applications
	wget https://downloads.sourceforge.net/project/dirb/dirb/2.22/dirb222.tar.gz
	tar -xvf dirb222.tar.gz
	rm dirb222.tar.gz
	brew install autoconf
	chmod -R 755 dirb222
	cd dirb222
	./configure
	make
	make install

	root@bitforbyte:~/xxx# binwalk 100AAPP7D0.bin

	DECIMAL HEXADECIMAL DESCRIPTION
	--------------------------------------------------------------------------------
	131072 0x20000 JFFS2 filesystem, big endian

	JFFS2 filesystem extract

	total 1492
	1049502 drwxr-xr-x 18 root root 4096 Oct 27 23:33 .