hackermondev

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

marcocastignoli

Vyper Bytecode Analysed

Bytecode structure

Smart contracts have two bytecodes: creation_bytecode and runtime_bytecode:

• the creation_bytecode is the one included in the transaction that deploys the contract.
• the runtime_bytecode is the one stored at the address of the contract, fetchable by calling the eth_getCode RCP method.

:::info This section is referring to Vyper contracts with version >=0.4.1, below you can find a separate section containing differences for older Vyper versions.

rauschma

// Triggered by: https://fediverse.zachleat.com/@zachleat/115300801628689509
// Interesting inconsistency...
// The reason is probably backward compatibility:
// Truthiness checks are often used to answer the question “Is this value an object?”

class MyBool {
  #bool;
  constructor(bool) {
    this.#bool = bool;
  }

subframe7536

#!/usr/bin/env python3
"""
Claude Configuration Manager - Simplified and Optimized
Manages API configurations for Claude with multiple presets support.
"""

import argparse
import json
import os
import sys

NotWadeGrimridge

#!/usr/bin/env -S uv --quiet run --script
# /// script
# requires-python = ">=3.13"
# dependencies = [
#     "beautifulsoup4",
#     "curl-cffi",
#     "pycryptodome",
#     "xclienttransaction",
# ]
# ///

darkobits

import { json } from '@tanstack/react-start'
import { getEvent, type ServerRouteMethodsRecord } from '@tanstack/react-start/server'
import createNodeAdapter, { type NodeOptions as NodeAdapterOptions } from 'crossws/adapters/node'

/**
 * Adapter for TanStack Start and `crossws`.
 *
 * @see https://tanstack.com/start/latest/docs/framework/react/server-routes
 * @see https://nitro.build/guide/websocket
 *

VictorTaelin

The Interaction Calculus

The Interaction Calculus (IC) is term rewriting system inspired by the Lambda Calculus (λC), but with some major differences:

1. Vars are affine: they can only occur up to one time.
2. Vars are global: they can occur anywhere in the program.
3. There is a new core primitive: the superposition.

An IC term is defined by the following grammar:

colinhacks

[
  {
    "key": "cmd+;",
    "command": "editor.action.goToDeclaration"
  },
  {
    "key": "shift+cmd+;",
    "command": "workbench.action.navigateBack",
    "when": "canNavigateBack"
  }

trvswgnr

import { describe, it, expect, spyOn } from "bun:test";
import { fetchJson } from "./fetchJson";

class MockResponse {
    static instanceCount = 0;
    constructor(
        public readonly ok: boolean,
        private jsonSuccess: boolean | "bad parse",
    ) {
        MockResponse.instanceCount++;

alexanderson1993

import { TinyBaseSynchronizedPartyKitServer } from "@/party/TinyBaseSynchronizedPartyKitServer.ts";
import type * as Party from "partykit/server";

export default class Server
  extends TinyBaseSynchronizedPartyKitServer
  implements Party.Server
{
  constructor(readonly room: Party.Room) {
    super(room);
  }