@hackermondev

breaking stuff

github.com/hackermondev
Joined November 2017
  • Tweets670
  • Following102
  • Followers6.3K
64Media
anyone outside the tech twitter bubbble clearly knows openai is winning the ai race. if you compare ai offerings between both companies, openai is significantly leading. anthropic spent most of their time building ai for coding which gave a lead initially..
4
13
2,979
but openai was able to catch up incredibly fast. today, they're both fairly on the same level in terms of coding. since openai focused on a variety of things beforehand, they have a variety of offerings for consumers, while anthropic isnt really good at anything else but coding
1
2
614
daniel retweeted
rekdt
@rekdtOct 5
Casually tapping the sign:
solst/ICE of Astarte
@IceSolstOct 5
Highest ROI for hiring a security engineer today than ever before. The tools are getting GOOD, like really good. You can find and fix bugs. You WILL find bugs, but you have to be looking. Either invest in seceng+tooling now, or spend ++money responding to incidents.
6
22
1
371
16,116
i used to love reading security writeups, i found it really interesting to see the thinking process behind how they found really impressive vulnerabilities. nowadays security writeups consist of prompting AI and effortlessly finding vulnerabilities with zero effort
10
28
2
401
14,025
http desync attack on discord !!
tmctmt@tmctmtApr 17
Spying on everybody's Discord attachments with HTTP desync tmctmt.com/posts/http-desync…

HTTP desync in Discord's media proxy (2022)

In 2022, I came across a quirky behavior on media.discordapp.net when I miskeyed a space character into an attachment link: a 502 bad gateway. After some fiddling I realized that this was caused by a...

tmctmt.com
3
10
292
42,072
You aren't "Building" anything when you just tell claude what to do, if you have a bot write a whole codebase for you it is no different than looking at someone elses code. If you have no idea what's where or how it's implemented it simply isn't Your code.
12
67
4
1,070
32,424
daniel retweeted
celeste
@vmfuncFeb 16
the watchers: how openai, the US government, and persona have been secretly running an identity surveillance system since nov 2023. vmfunc.re/blog/persona researched by @vmfunc, @MDLcsgo, @DziurwaF
124
825
145
4,192
501,090
we pwned x, vercel, cursor, and discord through a supply-chain attack news.ycombinator.com/item?id…
xyzeva@xyz3va18 Dec 2025
how to hack discord, vercel and more with one easy trick kibty.town/blog/mintlify/
16
62
6
1,419
212,832
daniel retweeted
xyzeva@xyz3va13 Dec 2025
CVE-2025-67842 CVE-2025-67843 CVE-2025-67844 CVE-2025-67845 CVE-2025-67846 w/ @hackermondev, @MDLcsgo
17
14
3
312
33,399
back in 2023, i found a vulnerability on Discord to grab a support ticket details using just it's id. ticket ids are incremental so an attacker could have enumerated the entire platform and stolen everything. i reported it to their bug bounty program. they marked it as an "High", refused to upgrade its severity, and then silently fixed it.
35
232
9
6,195
290,920
the recent Discord breach shows just how critical of a vulnerability this was. if someone else had stumbled upon this vulnerability, they could have very easily stolen thousands of government IDs and confidential data this is another classic example of how bug bounties are very scammy. Discord's response to the recent data breach shows just how severe this vulnerability could have been.
7
24
1
1,833
72,179
the hackerone employee who decided to change the dark theme needs to be fired
what the hell is this

ALT what the hell is this

16
4
2
140
19,107
you could essentially bypass any turnstile challenge during the outage. next cloudflare outage gonna be crazy
Cloudflare
@Cloudflare13 Jun 2025
Multiple Cloudflare services, including Workers KV, Access, WARP and the Cloudflare dashboard, experienced an outage for up to 2 hours and 28 minutes earlier today. Here's a detailed breakdown of what happened: blog.cloudflare.com/cloudfla…

Cloudflare service outage June 12, 2025

Today, June 12, 2025, Cloudflare suffered a significant service outage that affected a large set of our critical services, including Workers KV, WARP, Access, Gateway, Images, Stream, Workers AI,...

blog.cloudflare.com
1
2
38
5,938
Hackers, meet your new home. Claim your handle now⚡ we’d love your feedback or bug reports: [email protected] hackedin.net

hackedin

One profile for a security researcher's whole record. hackedin reads your verified HackerOne and Bugcrowd accounts, scores them, and puts them beside the write-ups you have published.

hackedin.net
9
18
2
120
20,323
i've been working on a security tool that i genuinely think will revolutionize web security research just a few more things to do..
5
2
142
12,296
daniel retweeted
xyzeva@xyz3va28 Feb 2025
how to gain code execution on millions of people and hundreds of popular apps and of course, firebase was (partially) the cause kibty.town/blog/todesktop/
99
275
85
3,191
698,536
the creator of doxbin was pwned through a calorie counter app
20
102
12
2,787
138,521
long article but its a really interesting OSINT investigation into Doxbin's original owner nacha.sh/
3
7
1
244
21,887
A bug in Cloudflare (and just the nature of how CDNs work) let an attacker learn the broad location of Discord, Signal, Twitter users by just sending them an image, according to a researcher. It works because you check which data center cached the image 404media.co/cloudflare-issue…

Cloudflare Issue Can Leak Chat App Users' Broad Location

A security researcher made a tool that let them quickly check which of Cloudflare's data centers had cached an image, which allowed them to figure out what city a Discord, Signal, or Twitter/X user...

404media.co
37
497
38
1,820
116,820
Research into a unique 0-click deanonymization exploit targeting Signal, Discord and hundreds of platform 🧵
102
462
104
4,214
421,142
gist.github.com/hackermondev…

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform - research.md

gist.github.com
16
112
26
823
69,957
Load more