(Moai Emoji) SandiyosDev

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

Chat GPT "DAN" (and other "Jailbreaks")

ForceNoBuddy

Skip the iPhone setup screen on checkra1n devices, make sure these files are written to /var/mobile/Library/Preferences

This no longer works as of iOS 15 (or it might, but I'm pretty sure it's gone)

com.apple.purplebuddy.plist

<?xml version="1.0" encoding="UTF-8"?>

	---- page.php ---
	<?php
	/**
	* This is a demo for using the WP Redis Group Cache.
	*/

	/**
	* A demo DustPress model class.
	*/
	class Page extends \DustPress\Model {

	Here is what Browse Securely transmits in regards to visiting a Spotify pairing page:

	{
	"uid": "36ebc658-c7bd-4230-8886-0f7cffce6b76",
	"utm_source": null,
	"mid": null,
	"prid": "8d5294c3-0bac-4959-a25b-c50df4726965",
	"id": "86a0a954-b827-40c5-9202-00689694c47c",
	"ext_num": 109,
	"runtime_id": "eldjnmdpkecnjjkmmgndpcibgkfpodfh",

	// code updates are now there:
	// https://github.com/Bleuje/processing-animations-code/blob/main/code/fractalsliding2d/fractalsliding2d.pde

	// Processing code by Etienne JACOB
	// for collab with Yann Le Gall (https://demozoo.org/graphics/322553/)
	// motion blur template by beesandbombs
	// See the license information at the end of this file.
	// View the rendered result at: https://bleuje.com/gifanimationsite/single/2dfractalslidingsquares/

	// using double instead of float makes the code a bit more complicated

	Unfortunately I have some bad news for downgrading.
	Before I explain the bad news at the end of this post, I first need to introduce a background of iOS devices.
	In iOS 16, Apple introduced a new firmware component known as Cryptex1. Technically, this is a "virtual" co-processor.
	It's purpose is to allow Apple to push RSRs (Rapid Security Responses) which are separate from traditional iOS updates and can be installed much faster.
	Like other firmwares, it also has a signing ticket locked to a cryptographic nonce (number-used-once).
	We commonly refer to the Apple signing tickets as SHSH blobs.
	Meaning the firmware can't be installed without a valid signing ticket as well as a matching nonce.
	The "big two" components we deal with signing/nonces are AP and SEP. AP is basically the main device chip (Application Processor).
	SEP is the security chip (Secure Enclave Processor).
	With regards to APNonce, Apple conveniently gave us the com.apple.System.boot-nonce NVRAM property which we use to set the APNonce generator.

	// https://github.com/qnblackcat/uYouPlus/discussions/447#discussioncomment-3672653

	%hook SSORPCService
	+ (id)URLFromURL:(id)arg1 withAdditionalFragmentParameters:(NSDictionary *)arg2 {
	NSURL *orig = %orig;
	NSURLComponents *urlComponents = [[NSURLComponents alloc] initWithURL:orig resolvingAgainstBaseURL:NO];
	NSMutableArray *newQueryItems = [urlComponents.queryItems mutableCopy];
	for (NSURLQueryItem *queryItem in urlComponents.queryItems) {
	if ([queryItem.name isEqualToString:@"system_version"]
	\|\| [queryItem.name isEqualToString:@"app_version"]

	iOS 16 introduced launch constraints, which can be used to constraint the launch of an application.
	There are three types of constraints:
	Self Constraints, which the launched application itself must meet
	Parent Constraints, which the parent process must meet
	Responsible Constraints, which the "responsible process" must meet (I assume that the responsible process is the process that asked launchd to launch a service)

	Additionally, the TrustCache format was updated (see below) to support assigning each binary a "Constraint Category", which forces Self and Parent Constraints.
	Note that Self, Parent and Responsible Constraints can also be set by the process performing the launch and they can be included in the code signature, in the new blob type 0xFADE8181. In both cases, the constraints are DER encoded (just like the DER entitlements).

	Constraint Categories (from TrustCache, new in version 2):

	@echo off
	@title Microsoft Edge Uninstaller [Windows 10 LTSC 2021/21H1 Edition]
	ver

	echo+
	goto check_admin_permissions
	:check_admin_permissions
	echo Script must Run as Administrator! Detecting permissions...
	net session >nul 2>&1
	if %errorLevel% == 0 (