Dwi Siswanto dwisiswant0

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

	# train_grpo.py
	#
	# See https://github.com/willccbb/verifiers for ongoing developments
	#
	import re
	import torch
	from datasets import load_dataset, Dataset
	from transformers import AutoTokenizer, AutoModelForCausalLM
	from peft import LoraConfig
	from trl import GRPOConfig, GRPOTrainer

	# log4j jndi exploit CVE-2021-44228 filter
	# Save this file as /etc/fail2ban/filter.d/log4j-jndi.conf
	# then copy and uncomment the [log4j-jndi] section
	# to /etc/fail2ban/jail.local
	#
	# [email protected]
	# https://jay.gooby.org/2021/12/13/a-fail2ban-filter-for-the-log4j-cve-2021-44228
	# https://gist.github.com/jaygooby/3502143639e09bb694e9c0f3c6203949
	# Thanks to https://gist.github.com/kocour for a better regex
	#

	#!/usr/bin/python
	# -- coding: utf-8 --
	import ssl
	import socket
	import os
	import sys
	from argparse import ArgumentParser
	from argparse import RawTextHelpFormatter
	from threading import Thread


	###
	# ▶ go get -u github.com/lc/gau
	# ▶ go get -u github.com/tomnomnom/qsreplace
	# ▶ go get -u github.com/tomnomnom/hacks/kxss
	# ▶ go get -u github.com/hahwul/dalfox
	# ▶ git clone https://github.com/dwisiswant0/DSSS
	###

	gauq() {

	#!/bin/bash

	#####
	#
	# St8out - Extra one-liner for reconnaissance
	#
	# Usage: ./st8out.sh target.com
	#
	# Resources:
	# - https://github.com/j3ssie/metabigor

Dwi Siswanto dwisiswant0

say hello to zendesk

your weakest link

Table of Contents

set -e, -u, -x, -o pipefail

	#!/usr/bin/env bash

	# CVE-2019-11253
	# https://github.com/kubernetes/kubernetes/issues/83253
	# Shout out: @raesene for poc collab, @iancoldwater + @mauilion for
	# HONKing inspiration and other guidance.
	# Description: In Kubernetes 1.13 and below, the default configuration
	# is that system:anonymous can request a selfsubjectaccessreview
	# via mechanisms such as "kubectl auth can-i". This request can
	# include POSTed YAML, and just the act of trying to parse it causes

	brew install caddy mkcert nss dnsmasq

	mkcert -install

	mkcert '.app.test' '.cdn.test'

	# rename the certs and move them under /usr/local/etc/caddy/certs

	cat <<EOF > /usr/local/etc/caddy/Caddyfile
	.app.test:443, .cdn.test:443 {