Skip to content

Instantly share code, notes, and snippets.

View youngchief-btw's full-sized avatar
👋
chat with me!

YoungChief youngchief-btw

👋
chat with me!
View GitHub Profile
@hackermondev
hackermondev / research.md
Last active March 4, 2025 05:23
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

@hackermondev
hackermondev / zendesk.md
Last active February 20, 2025 07:58
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

c: command
cc: commandContext
v: version
P: payload
N: bulkedPayload
fP: fanoutPayload
aP: additionalPayload
Pm: payloadMetadata
i: messageId
U: messageUUID
@Firepup6500
Firepup6500 / mf-adblock.js
Last active December 27, 2024 05:07
mf-adblock 0.7: A Tamper Monkey Adblocker
// ==UserScript==
// @name mf-adblock
// @namespace none
// @version 0.7
// @description A basic anti-adblock workaround that can remove or click elements on a website
// @author DerFichtl, with major improvements by Firepup650
// @match https://*/*
// @icon https://getadblock.com/favicon.ico
// @grant none
// @noframes
@mitchellh
mitchellh / overlay.nix
Last active November 2, 2024 22:01
Playdate SDK on Nix on aarch64
let
# Playdate distributes their SDK as precompiled x86_64 binaries
# currently so we have to import cross-compiled packages for it
# if we're not on an x86_64 system.
pkgsIntel = import <nixpkgs> {
crossSystem = {
config = "x86_64-unknown-linux-gnu";
};
};
in
@hackermondev
hackermondev / api endpoints.md
Last active February 27, 2025 13:18
discord api endpoints

List of every single Discord API endpoint used on the client

Last updated: August 16, 2023

https://discord.com/api/v9

Endpoint Name path
@makamys
makamys / 1.7.10-essentials.md
Last active February 8, 2025 12:43
List of "Essential" 1.7.10 Mods

List of "Essential" 1.7.10 Mods

This is a list of Minecraft 1.7.10 mods that are not focused on adding new original content. Instead, they make the base game run better, or port over features from other versions of vanilla.

These lists try to comprehensively list all the available options. You will not want to use all of the listed mods at once.

Some of the listed mods require a Mixin bootstrap mod in order to work. See the Mixin mods section near the end of the document for information about that.

Table of Contents

@hackermondev
hackermondev / replit subdomains.txt
Last active January 21, 2025 17:08
List of all public Replit subdomains
List of all Replit subdomains
Someone wanted me to post this so I did
Most of them are used for internal stuff and you can't access them
------------------------------------------------------------------------------------------------
replit.com|104.18.12.38,104.18.13.38
art.replit.com|34.120.57.62
ask.replit.com|64.62.250.111
blog.replit.com|104.18.12.38,104.18.13.38
boops.magic.teams.replit.com|34.120.57.62
@idleberg
idleberg / playdate-sdk.md
Last active November 23, 2024 21:06
Install Playdate SDK using a package manager

Install Playdate SDK

If you're like me, you want to install the Playdate SDK using a package manager. Below are some options for you.

Info Did I miss anything? Please comment below!

macOS

@santaklouse
santaklouse / CrossOver.sh
Last active March 4, 2025 10:47
unlimited CrossOver trial (MacOS)
#!/usr/bin/env bash
# checck if pidof exists
PIDOF="$(which pidof)"
# and if not - install it
(test "${PIDOF}" && test -f "${PIDOF}") || brew install pidof
# find app in default paths
CO_PWD=~/Applications/CrossOver.app/Contents/MacOS
test -d "${CO_PWD}" || CO_PWD=/Applications/CrossOver.app/Contents/MacOS