This guide is for Windows.
adb shell
hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.
3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.
I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:
By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k
hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:
If you've spent some time online, you’ve probably come across Zendesk.
Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like support@company.com), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.
Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.
| // This is a hack, a quick and dirty console script for RT/tweets (with replies) removal w/o API | |
| // To be used in: https://twitter.com/Username/with_replies | |
| // Set your username (without @) below (case-sensitive) to correctly trigger the right Menu | |
| const tweetUser = 'Username' | |
| // BUG, With above we still trigger Menu on some replies but relatively harmless. | |
| // @Hack Implement simple has() for querySelector | |
| const querySelectorHas = function( parent, child ){ |
| #!/usr/bin/env python3 | |
| # Recursively generate index.html files for | |
| # all subdirectories in a directory tree | |
| ########################################################################## | |
| ## ❗️❗️❗️ WARNING: This version is outdated and unmaintained! | |
| ## For an up-to-date version with cleaner CSS styling see: | |
| ## https://gist.github.com/glowinthedark/625eb4caeca12c5aa52778a3b4b0adb4 | |
| ########################################################################## |
| import discord | |
| from discord.ext import commands | |
| from discord.ext.commands.cooldowns import BucketType | |
| bot = commands.Bot(command_prefix = "your prefix here") | |
| token = 'token goes here' | |
| #on ready login message | |
| @bot.event | |
| async def on_ready(): |
This document contains snippets that I've used and tested. It's not meant to be an official guide, but rather a document for looking up small snippets of code. For an extensive reference on the API, please visit the official documentation.
| /** | |
| * !!!! This code doesn't work anymore !!!! | |
| * | |
| * - You can check working code on comments. I won't update this code anymore. | |
| * | |
| * Also, I just decided to remove this code. You can check revisions for old code. | |
| * Since this code was made for discord client that almost 5 years ago, It seems like doesn't work anymore. | |
| * I don't want people keep arguing in the comments, i decided to remove this code. | |
| * | |
| * Note: This code is now fulfilled with Javascript comments. This code won't work even if you pasted to console. doesn't do anything. |
| """ | |
| A simple proxy server, based on original by gear11: | |
| https://gist.github.com/gear11/8006132 | |
| Modified from original to support both GET and POST, status code passthrough, header and form data passthrough. | |
| Usage: http://hostname:port/p/(URL to be proxied, minus protocol) | |
| For example: http://localhost:5000/p/www.google.com | |
| """ | |
| import re |
| import requests # dependency | |
| url = "<your url>" # webhook url, from here: https://i.imgur.com/f9XnAew.png | |
| # for all params, see https://discordapp.com/developers/docs/resources/webhook#execute-webhook | |
| data = { | |
| "content" : "message content", | |
| "username" : "custom username" | |
| } |