hackermondev

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

aamiaa

Complete Recent Discord Quest

Note

This does not works in browser for quests which require you to play a game! Use the desktop app to complete those.

How to use this script:

1. Accept a quest under Discover -> Quests
2. Press Ctrl+Shift+I to open DevTools
3. Go to the Console tab
4. Paste the following code and hit enter:

ave9858

Easy Telemetry Disable for 10/11

Prerequisites

1. Upgrade to Enterprise edition of Windows 10/11 if you are running Home or Pro.
   • You can do this through the Change Edition option in the Extras menu in MAS.

Disabling Telemetry via Group Policy

1. Open the Group Policy Editor. Search for "Edit Group Policy" in search or run gpedit.msc.

zoalasaurusrawr

Legend of Zelda: Tears of the Kingdom TXTG File Format

Header

Offset	Name	Length	Expected Value	Notes
x00	Magic	8 Bytes	x50 x00 x11 x00 x36 x50 x4b x30	The last four bytes always contain 6PK0
x08	Width	2 Bytes	Variable	Most likely width based upon similarly named sprite sizes
x0A	Height	2 Bytes	Variable	Most likely height based upon similarly named sprite sizes

torcado194

/*** MIT LICENSE
Copyright (c) 2022 torcado

Permission is hereby granted, free of charge, to any person
obtaining a copy of this software and associated documentation
files (the "Software"), to deal in the Software without
restriction, including without limitation the rights to use,
copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the
Software is furnished to do so, subject to the following

CataLatas

import asm65816

/*
 *  Relocates the movement script pointer table, allowing
 *  for custom scripts to be inserted into the game
 *
 *  By Catador
 *  Additional ideas by JTolmar and cooprocks123e
 *  And maybe others (sorry!)
 */

y0lopix

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search]
"BingSearchEnabled"=dword:00000000
"AllowSearchToUseLocation"=dword:00000000
"CortanaConsent"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search]
"AllowCortana"=dword:00000000
"DisableWebSearch"=dword:00000001

PhoenixBound

/*ASM Code to implement a proper Run Button patch to EarthBound with CoilSnake*/
/*Made by ShadowOne333 for MaternalBound (https://forum.starmen.net/forum/Community/PKHack/WIP-MaternalBound-Uncensoring-Other-junk-hack)*/
import asm65816

ROM[0xC094E3] = {
	
	JSL	(burned_status)		// Jump to our ASM custom subroutine
	NOP				// No operation
	NOP				// No operation
}

valmcc

# Extracts .bars files (like in Animal crossing New Horizons) into .bwav files
# (These are for sound effects)
# Place in your /Sound/Resource folder, it will then convert all the .bars files to .bwav files (output to /output_bwav)
# run with "python .\bwavbarextract.py"
# Tested with Python 3.8.2 on Windows 10
# By Valer (3/May/2020) (valmcc)
import glob
import os
import re
bars_list = glob.glob('./*.bars')

aymericbeaumet

Ever wanted to delete all your likes/favorites from Twitter but only found broken/expensive tools? You are in the right place.

1. Go to: https://twitter.com/{username}/likes
2. Open the console and run the following JavaScript code:

setInterval(() => {
  for (const d of document.querySelectorAll('div[data-testid="unlike"]')) {
    d.click()
 }