UndecimoDia

Cybersecurity | Penetration Testing | Bug Bounty 💻
Філософські думки з низькою глибиною

[UndecimoDia @undecimodia]

@grok @Stringcodes Show me basic syntax

[UndecimoDia @undecimodia]

@neerajjj6785 @Stringcodes Not safe like rust

[UndecimoDia @undecimodia]

@africatodayMG @grok really??

[UndecimoDia @undecimodia]

@koshk0devo4ka Pls, DM meee 😭😭😭

[UndecimoDia @undecimodia]

@rydgel @KaoruBoyVRC @marckohlbrugge Looked through the whole page and there's not a single "benevolent worm" mention. Autistic person called anothers "autistic" is hilarious

[UndecimoDia @undecimodia]

@chess_feed r/unexpectedfactorial

[UndecimoDia @undecimodia]

@GrapheneOS Everything was "Update error", but yeah. You are right. Updated and now I'm safe! Thanks for your work! You are awesome!

[UndecimoDia @undecimodia]

@awarmanf @anvie Any client can do this if you press "Advanced" -> "Proceed to..." 🥸🤓

[UndecimoDia @undecimodia]

@vxunderground Hey smelly! Why do you prefer IDA, instead of ghidra or others? @vxunderground

[UndecimoDia @undecimodia]

@_banzaan && ss -tulnp | grep LISTEN

[vx-underground @vxunderground]

> be JayTaelien
> security researcher
> discovered Discord zero day exploit
> send Twitch embed to victim
> something something
> massive exploit chain
> arbitrary code execution
> only requirement is victim clicking a Twitch embed
> Discord confirms 1 ClickRCE
> pays him $5,500

Dawg, someone get Discord on the horn and tell their CEO his company is a fucking piece of shit. This exploit is devastating and if this guy didn't tell them, and instead decided to weaponize it, he could have fucking destroyed end users.

All bro would have had to do is be like. "Check out this Twitch streamers clip", and destroyed their machine, executing any malware they wanted arbitrarily, stealing data, whatever.

Bro could have gone to large Discord channels, shared the link, potentially infecting thousands upon thousands of people effortlessly

He could have down more precise operations targeting prominent streamers, moderators, celebrities known to use Discord, and fucking wiped them all out with anything he chose to execute

Imagine if he sold this exploit to ransomware groups

He could have made millions of dollars, easily

Imagine if he went into a cryptocurrency Discord and the payload was a cryptodrainer. He could have drained entire communities in seconds

And they paid bro $5,500

That's absolutely sickening. JayTaelien is a fucking saint and decides a much larger payouf

[UndecimoDia @undecimodia]

@ChAdiKua @roootik Теж затупив. Глянь на рік)

[UndecimoDia @undecimodia]

@flaming_mace @Sad_Berdyansk Ми робили те саме що робить ШІ. Ми крали код з гітхабу

[UndecimoDia @undecimodia]

@vxunderground Hey @vxunderground , I'm newbie goopie noob, but I would like to take a look onto your notes. Is it possible?

[UndecimoDia @undecimodia]

@codewith55 @openSUSE Literally unbreakable. In the worst case, I'll just revert (thanks snapper)

[UndecimoDia @undecimodia]

@Aditya_181105 First thought: race condition. I would check the methods responsible for generating and assigning uuids

[UndecimoDia @undecimodia]

@theo And no ZDR. It might be the most important moment. Think about it)

[UndecimoDia @undecimodia]

@tanujDE3180 Do we deal with it under GDPR? If so, I'm out. I don't want a lawsuit