hackermondev

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

FreyaHolmer

///////////////////////////////////////////////////////////////////////////////
// ABOUT:        A unity Shader .cginc to draw numbers in the fragment shader
// AUTHOR:       Freya Holmér
// LICENSE:      Use for whatever, commercial or otherwise!
//               Don't hold me liable for issues though
//               But pls credit me if it works super well <3
// LIMITATIONS:  There's some precision loss beyond 3 decimal places
// CONTRIBUTORS: yes please! if you know a more precise way to get
//               decimal digits then pls lemme know!
//               GetDecimalSymbolAt() could use some more love/precision

Nickguitar

Bypassing Discord marked links filter

Recently a friend of mine showed me a way to use hyperlinks on Discord. Discord has a markdown notation support, so users can enhance their messages with formatting, using bold, itallic, titles, etc. It's also possible to use what Discord calls masked links, which are hyperlinks, just like normal markdown, using the syntax [text](https://example.com). The result is the following:

In the context of cybersecurity, one of the first things that comes to mind is to try to make a fake link, putting another URL on the "text" part. It would be something like [https://example.com](https://malicious.com). By doing so, an user would see the URL https://example.com, but by clicking on it, he would be redirected to https://malicious.com.

nkrapivin

function rerand() constructor {
	state = [ 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 ];
	g_nRandSeed = 0;
	g_RndIndex = 0;
	s_nRandomPoly = $DA442D24;
	RND_MAX = $FFFFFFFF;
	s_nStateAndMask = RND_MAX;

	InitRandom = function(/*uint*/ _seed) {
		var uVar3 = _seed;

rcmagic

Readme: In the following pseudo code, [] indicates a subroutine.
Sometimes I choose to write the subroutine inline under the [] in order to maintain context. 
One important fact about the way rollbacks are handled here is that we are storing state for every frame. 
In any real implementation you only need to store one game state at a time. Storing a game 
state for every frame allows us to only rollback to the first frame where the predicted inputs don't match the true ones.


==Constants==
MAX_ROLLBACK_FRAMES     := Any Positive Integer         # Specifies the maximum number of frames that can be resimulated
FRAME_ADVANTAGE_LIMIT   := Any Positive Integer         # Specifies the number of frames the local client can progress ahead of the remote client before time synchronizing. 

beepdavid

Very quick overview of how this works: https://twitter.com/beepdavid/status/814869295524155392

1) Custom path tool that supports line, quad and bezier sections
2) On path change, create a polygon (Vector3 array) by sampling points along the path 
3) Curves are sampled evenly by estimating the curve length first, then sampling at the required curve resolution
4) Feed polygon into https://triangle.codeplex.com/ to get triangle data (this needs some work to use in Unity)
5) Create procedural mesh using output triangle data
6) Profit!

Any questions, comment or tweet me @beepdavid :)

define-private-public

// Filename:  HttpServer.cs        
// Author:    Benjamin N. Summerton <define-private-public>        
// License:   Unlicense (http://unlicense.org/)

using System;
using System.IO;
using System.Text;
using System.Net;
using System.Threading.Tasks;

ruby0x1

public static function unzip( _path:String, _dest:String, ignoreRootFolder:String = "" ) {

        var _in_file = sys.io.File.read( _path );
        var _entries = haxe.zip.Reader.readZip( _in_file );

            _in_file.close();

        for(_entry in _entries) {
            
            var fileName = _entry.fileName;

AxGord

package ;

class FastSignalsExample {
	static function main() {
		var o = new Signal1<String>();
		o.add(function(v) trace(v));
		o.dispatch('Hello');
	}
}

profelis

package worker;

import flash.display.Sprite;
import flash.system.*;
import haxe.io.*;
import format.swf.*;

/**
 * usage:
 * -lib format