Skip to content

Instantly share code, notes, and snippets.

View JunkiEDM's full-sized avatar
🐢
i have no idea what im doing

Juan JunkiEDM

🐢
i have no idea what im doing
View GitHub Profile
@hackermondev
hackermondev / research.md
Last active April 27, 2025 19:28
Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

hi, i'm daniel. i'm a 15-year-old high school junior. in my free time, i hack billion dollar companies and build cool stuff.

3 months ago, I discovered a unique 0-click deanonymization attack that allows an attacker to grab the location of any target within a 250 mile radius. With a vulnerable app installed on a target's phone (or as a background application on their laptop), an attacker can send a malicious payload and deanonymize you within seconds--and you wouldn't even know.

I'm publishing this writeup and research as a warning, especially for journalists, activists, and hackers, about this type of undetectable attack. Hundreds of applications are vulnerable, including some of the most popular apps in the world: Signal, Discord, Twitter/X, and others. Here's how it works:

Cloudflare

By the numbers, Cloudflare is easily the most popular CDN on the market. It beats out competitors such as Sucuri, Amazon CloudFront, Akamai, and Fastly. In 2019, a major Cloudflare outage k

@hackermondev
hackermondev / zendesk.md
Last active April 24, 2025 04:34
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

@camila314
camila314 / index.tsx
Last active June 24, 2024 19:07
ServerSearch Plugin for Vencord
/*
* Vencord, a Discord client mod
* Copyright (c) 2023 Vendicated, camila314, and contributors
* SPDX-License-Identifier: GPL-3.0-or-later
*/
import definePlugin from "@utils/types";
import { Devs } from "@utils/constants";
import { findByCodeLazy } from "@webpack";
@ravarcheon
ravarcheon / spectralRotation.py
Last active April 12, 2025 04:35
rotates an audio file by 90 degrees in the spectrum while being a reversible process with minimal loss (only floating point errors which are like -150 dB but thats literally silence ahaha~)
import numpy as np
import soundfile as sf
from scipy.fftpack import fft, ifft
def rotateSignal(signal,flip):
if flip:
signal = signal[::-1]
x = np.concatenate((signal, signal[1:][::-1])) # concatenating the array with a reverse of itself makes it such that the fourier transform doesn't layer over a reversed version of itself in the inverse fft
rotSig = ifft(x)
@aamiaa
aamiaa / CompleteDiscordQuest.md
Last active April 27, 2025 06:58
Complete Recent Discord Quest

Complete Recent Discord Quest

Note

This does not works in browser for non-video, non-activity quests! For stream/play quests use the desktop app!

Note

When doing stream quests, you need at least 1 other account in the vc!

How to use this script:

  1. Accept a quest under Discover -> Quests
@MCJack123
MCJack123 / taskmaster.lua
Last active December 29, 2024 21:57
Taskmaster: A simple and highly flexible task runner/coroutine manager for ComputerCraft
-- Taskmaster: A simple and highly flexible task runner/coroutine manager for ComputerCraft
-- Supports adding/removing tasks, early exits for tasks, event white/blacklists, automatic
-- terminal redirection, task pausing, promises, and more.
-- Made by JackMacWindows
-- Licensed under CC0 in the public domain
--[[
Examples:
- Run three functions in parallel, and wait for any to exit.
@ricewind012
ricewind012 / a.js
Last active June 11, 2024 20:09
restore normal classes
class CClassDeminifier {
constructor() {
this.m_bInClient = !!window.SteamClient?.User;
this.m_strWebpackGlobal = Object.keys(window).find(
(e) => e.startsWith("webpackChunk") && e !== "webpackChunklegacy_web",
);
this.m_vecModules = [];
this.k_unDelay = 1.5;
this.k_vecWebSelectors = [
@facelessuser
facelessuser / exploring-tonal-palettes.md
Last active March 5, 2025 05:46
Exploring Tonal Palettes

Exploring Tonal Palettes

HCT

HCT is a color model developed by [Google][material-hct]. It aims to solve a problem related to generating color palettes with good contrast. While HCT may seem like a revolutionary color model, the idea behind it is quite simple, take the perceptually uniform color model CAM16 and combine it with the CIE Lab's lightness.

Upside of HCT

@JunkiEDM
JunkiEDM / github-custom-global-nav-tweaks.user.css
Last active April 6, 2025 13:55
A collection of css tweaks to be used with the "GitHub Custom Global Navigation" UserScript: https://greasyfork.org/en/scripts/478687-github-custom-global-navigation
/* ==UserStyle==
@name Custom Global Nav Tweaks
@namespace github.com/JunkiEDM
@version 1.4.1
@description A collection of css tweaks to be used with the "GitHub Custom Global Navigation" UserScript: https://greasyfork.org/en/scripts/478687-github-custom-global-navigation
@author JunkiEDM
@preprocessor less
@updateURL https://gist.github.com/JunkiEDM/34dc590995c4c56671f7f2499c60d7ce/raw/github-custom-global-nav-tweaks.user.css
@var checkbox full-buttons "Full mobile action buttons" 1
@var checkbox hide-reponav "Using GitHub Custom Global Navigation" 0
const
execute = async function () {
const cmd = await command.execute(...arguments)
if (!cmd.success) {
let acc = ``
for (const argument of arguments)
acc += argument + ` `
throw Error(`$${acc}\u{2022} ${cmd.reason ?? cmd.reply}`)
}
return cmd.reply