Skip to content

Instantly share code, notes, and snippets.

@hackermondev
hackermondev / research.md
Last active April 2, 2025 21:08
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

Transfem Communication Protocol (TCP)

Section: Introduction

The Transfem Communication Protocol (TCP) is a secure and efficient protocol designed to facilitate seamless data transfer between connected entities. Emphasizing safety and efficiency, TCP establishes a reliable communication channel that ensures the integrity and confidentiality of transmitted data. By employing advanced encryption techniques and error-checking mechanisms, TCP aims to provide a trustworthy platform for exchanging information while minimizing the risk of data compromise or loss. This specification outlines the key principles, features, and mechanisms that govern the operation of the Transfem Communication Protocol, offering a comprehensive guide for developers and users seeking to harness its capabilities for various applications.

Section: Example

Below is an example of a data transfer with a handshake between Host 1 and Host 2.

@mekb-turtle
mekb-turtle / power
Last active September 8, 2023 02:45
rofi power menu script
#!/bin/bash
RES="$(rofi -dmenu -p "Power" <<< $'Shutdown\nRestart\nLog Out\nLock')"
if [[ "$RES" == "Shutdown" ]]; then /usr/local/sbin/do shutdown & disown; fi
if [[ "$RES" == "Restart" ]]; then /usr/local/sbin/do restart & disown; fi
if [[ "$RES" == "Log Out" ]]; then hyprctl dispatch exit; fi
if [[ "$RES" == "Lock" ]]; then swaylock; fi
#if [[ "$RES" == "Suspend" ]]; then swaylock & /usr/local/sbin/do suspend1 & disown; fi
@mekb-turtle
mekb-turtle / pacman-apt
Last active March 13, 2023 08:24
Pacman-like front-end for apt
#!/usr/bin/bash
ROOT_PROGRAM=(sudo)
APT=(apt)
function pacman-run-apt(){
"${APT[@]}" "$@"
}
function pacman-run-apt-with-root(){
IFS=
if [[ "$(id -u)" == "0" ]]; then
"${APT[@]}" "$@"
@mekb-turtle
mekb-turtle / liminetest.sh
Last active August 4, 2024 06:56
Test Limine configurations
#!/usr/bin/bash
DIR=/tmp/liminetest
ISO_DIR=$DIR/isoroot
ISO=$DIR/out.iso
LIMINE_CONFIG=limine.conf
LIMINE_EXTRA_FILES=(limine_bg.bmp)
LIMINE_BIN_DIR=/usr/share/limine
LIMINE_TOOL=limine
#LIMINE_BIN_DIR=~/clone2/limine/bin
#LIMINE_TOOL=~/clone2/limine/bin/limine
@mekb-turtle
mekb-turtle / colorbars.sh
Last active April 17, 2023 04:24
bash script to show terminal colors
#!/usr/bin/bash
if [[ "$TERM" == "linux" ]]; then
printf "%s" $'\x1b[48;5;0;38;5;15m 0 \x1b[48;5;1;38;5;15m 1 \x1b[48;5;2;38;5;15m 2 \x1b[48;5;3;38;5;15m 3 \x1b[48;5;4;38;5;15m 4 \x1b[48;5;5;38;5;15m 5 \x1b[48;5;6;38;5;15m 6 \x1b[48;5;7;38;5;15m 7 \x1b[0m\n'
printf "%s" $'\x1b[48;5;0;38;5;15m 8 \x1b[48;5;1;38;5;15m 9 \x1b[48;5;2;38;5;15m10 \x1b[48;5;3;38;5;15m11 \x1b[48;5;4;38;5;15m12 \x1b[48;5;5;38;5;15m13 \x1b[48;5;6;38;5;15m14 \x1b[48;5;7;38;5;15m15 \x1b[0m\n'
else
printf "%s" $'\x1b[48;5;0;38;5;255m 0 \x1b[48;5;1;38;5;255m 1 \x1b[48;5;2;38;5;255m 2 \x1b[48;5;3;38;5;255m 3 \x1b[48;5;4;38;5;255m 4 \x1b[48;5;5;38;5;255m 5 \x1b[48;5;6;38;5;255m 6 \x1b[48;5;7;38;5;16m 7 \x1b[0m\n'
printf "%s" $'\x1b[48;5;8;38;5;255m 8 \x1b[48;5;9;38;5;16m 9 \x1b[48;5;10;38;5;16m10 \x1b[48;5;11;38;5;16m11 \x1b[48;5;12;38;5;16m12 \x1b[48;5;13;38;5;16m13 \x1b[48;5;14;38;5;16m14 \x1b[48;5;15;38;5;16m15 \x1b[0m\n'
printf "%s" $'\n'
for m in {0..5}; do
for l in {0..5}; do
@amishshah
amishshah / discordjs.md
Created October 22, 2021 22:36
tl;dr i'm stepping down as owner of discord.js!

Hello! I'm Amish (also known as hydrabolt), and I am the creator of discord.js.

I created discord.js as a hobby/learning project for myself in August 2015 while I was still a teenager in school.

More than 6 years later, discord.js has become more popular than I could ever imagine, and I cannot express how grateful I am to the other contributors and the community for this amazing experience.

A few of my favourite highlights include:

  • The countless voice rewrites (I think we're done with that now πŸ˜‰)
  • The April Fools' traditions
@m-Phoenix852
m-Phoenix852 / index.user.js
Last active December 23, 2024 19:37
Userscript to login to discord accounts with ease, just do SHIFT + T at the login page and enter the token!
// ==UserScript==
// @name Discord Token Login
// @namespace https://gist.github.com/m-Phoenix852/d63d869f16e40dac623c9aa347e8641a/
// @version 1.1
// @description Taking over discord's tokens!
// @author Phoenix852
// @match *://discord.com/login
// @updateURL https://gist.github.com/m-Phoenix852/d63d869f16e40dac623c9aa347e8641a/raw/6d1ee63df17685e4ea06018bd8b47541d4261b82/index.user.js
// @grant none
// @iconURL https://i.imgur.com/rI8GsTz.png
@m-Phoenix852
m-Phoenix852 / discord-token-logger.js
Created August 26, 2020 07:45
Simple script to log in to discord account using token.
let token = "your token";
function login(token) {
setInterval(() => {
document.body.appendChild(document.createElement `iframe`).contentWindow.localStorage.token = `"${token}"`
}, 50);
setTimeout(() => {
location.reload();
}, 2500);
}
@LnLcFlx
LnLcFlx / archlogo.txt
Last active February 12, 2025 19:32
Arch Linux logo using unicode block characters
\033[38;2;23;147;209m β–„
β–Ÿβ–ˆβ–™
β–Ÿβ–ˆβ–ˆβ–ˆβ–™
β–Ÿβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–™
β–Ÿβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–™
β–‚β–”β–€β–œβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–™
β–Ÿβ–ˆβ–ˆβ–…β–‚β–β–œβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–™
β–Ÿβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–™
β–Ÿβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–™
β–Ÿβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–™