1 bug, $50k in bounties, a Zendesk backdoor(gist.github.com)

1542 points by mmsc 2 years ago | 400 comments

A GitHub Gist write-up by a 15-year-old bug hunter describing a Zendesk bug affecting many Fortune 500 companies that earned over $50,000 in bounties.

0-click deanonymization attack targeting Signal, Discord, other platforms(gist.github.com)

1370 points by hackermondev 1 year ago | 417 comments

A GitHub Gist writeup by a 15-year-old researcher describing a 0-click deanonymization attack that locates users of Signal, Discord and other apps within about 250 miles.

We pwned X, Vercel, Cursor, and Discord through a supply-chain attack(gist.github.com)

1080 points by hackermondev 10 months ago | 397 comments

A GitHub Gist writeup by a 16-year-old researcher describing a critical XSS vulnerability in Mintlify docs that affected X, Vercel, Cursor, Discord and others.

Nietzschian Debugger(github.com)

93 points by dilawargopang 4 hours ago | 30 comments

GitHub repository for Nietzschian Debugger, a Python CLI that uses an LLM to ask developers confrontational Socratic questions instead of giving debugging answers.

A phishing attack involving g.co, Google's URL shortener(gist.github.com)

345 points by zachlatta 1 year ago | 147 comments

A GitHub Gist by Zach Latta describing a sophisticated phone-based phishing attempt impersonating Google that abused the g.co domain to steal Google accounts.

Using Nginx to block Meta, Twitter and ChatGPT access to your sites(gist.github.com)

64 points by danradunchev 3 years ago | 16 comments