Skip to content

Instantly share code, notes, and snippets.

@hackermondev
hackermondev / zendesk.md
Last active May 3, 2025 05:23
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

[
"928350122843193385",
"1185047194261274665",
"956202276408688650",
"956104664821157918",
"1185047092478095443",
"1185046791826178099",
"1185047045413797898",
"928483283698851901",
"1185047444619284641",
@lorenzo132
lorenzo132 / discord_app_protocols.md
Created February 6, 2022 20:39 — forked from ghostrider-05/discord_app_protocols.md
An unofficial list of discord app protocols

Discord app protocols

Home:

  • /: discord://-/
  • friends: discord://-/channels/@me/
  • nitro: discord://-/store

General:

@advaith1
advaith1 / top bots.md
Last active May 7, 2025 19:18
The top Discord bots ranked by server count
Rank Bot Approximate Server Count Library
1 MEE6 21,300,000 Custom Python
2 Rythm 🪦 15,200,000 JDA
3 carl-bot 🅱️ 10,900,000 Pycord
4 Groovy 🪦 10,100,000 JDA, Discord4J
5 Dyno
@nerrixde
nerrixde / vpn.md
Last active April 30, 2024 19:23 — forked from joepie91/vpn.md
Don't use VPN services.

Don't use VPN services.

No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.

Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.

  • A Russian translation of this article can be found here, contributed by Timur Demin.
  • A Turkish translation can be found here, contributed by agyild.
  • There's also this article about VPN services, which is honestly better written (and has more cat pictures!) than my article.
@joepie91
joepie91 / vpn.md
Last active May 10, 2025 10:28
Don't use VPN services.

Don't use VPN services.

No, seriously, don't. You're probably reading this because you've asked what VPN service to use, and this is the answer.

Note: The content in this post does not apply to using VPN for their intended purpose; that is, as a virtual private (internal) network. It only applies to using it as a glorified proxy, which is what every third-party "VPN provider" does.

  • A Russian translation of this article can be found here, contributed by Timur Demin.
  • A Turkish translation can be found here, contributed by agyild.
  • There's also this article about VPN services, which is honestly better written (and has more cat pictures!) than my article.
@nickvergessen
nickvergessen / Releasing 3.1.6.md
Last active September 5, 2015 13:28
Releasing 3.1.6

Todo List for 3.1.6

General

  • Make sure phpBB/docs/CREDTIS.txt is up to date
  • Make sure Contributors have their ranks
  • Make sure all reports in the security tracker are closed or invalid
  • Go through Issues fixed in 3.1.6 and correct any unreadable descriptions
  • Check the feature hightlights wiki page for completeness
  • Branch of prep-release-3.1.6 from 3.1.x:
@aredridel
aredridel / reader.js
Created June 8, 2011 07:23
Read from a stream: works with a FIFO.
var fs = require('fs')
var s = fs.createReadStream('x')
s.on('data', function(b) { console.log(b) })