The webhooks would have broke Sneaker Twitter back in the day
With sneaker twitter back, I figured now is a good time to reveal one of the best kept secrets. Built the best private bot in the world. 1 instance, tens of thousands of pairs secured. No bricks allowed. S/o my group and @dambodev. Good ole days. If you’re an ex-sneaker dev, please connect. Here are some of my favorites:
dambo retweeted
Come watch 2 degens waste money gambling on the live stream today at 7PM EST, where we'll also be dropping an exclusive 25% discount to join @PastelAlpha!
For every sign up during the stream, we'll give away:
What we unbox to people in chat
Random SOL prizes
Link below ⬇️
Even after the update you are still able to grab every players IP address upon connecting. Videos are showing this happen when a user interacts with voting that involves the players name.
It doesn't appear you are able to run JavaScript from this exploit.
#CS2
HUGE SECURITY EXPLOIT IN CS2 RIGHT NOW⚠️
This image has been going around reddit for the last few hours (very explicit, blurred for obvious reasons). People were saying it's fake, but it isn't.
Apparently, there is a security exploit with Steam names inside CS2, which allows for people to change visual stuff inside the game with a simple HTML code linking an image.
But this is not it, apparently you can also get the IP's of EVERYONE in the server using this method with the assist of an IP Logger. (Not going to show much or explain how for obvious reasons, but it is very easy)
It's also speculated people could potentially do things like run code on your computer or get access to your steam account this way. I DID NOT see anyone do this, it's speculation from people who know much more than me.
This should be fixed very fast but what a huge oversight from Valve, maybe it's better to just not open CS2 while this is not fixed. @CounterStrike
Here you can see when I request the URL in my browser, it is able to execute JavaScript and request the endpoint I have setup to receive the fetch request embed in the page. When ran in game, it does not appear to execute the JavaScript function.
#CS2
While I don't think this specific case should be a massive cause for concern, it should be treated as one. There are a ton of different ways @valvesoftware and @CounterStrike can fix this very easily. XXS vulnerabilities can be extremely dangerous as @CallofDuty learned.
If you have ever been interested in your @CounterStrike unbox history, I wrote a script to view all of your past unboxed. Feel free to check it out on GitHub.
Codes pretty buggy and disorganized but I made it for my friends and I.
github.com/Dambocode/CSGO-In…
dambo retweeted
Why is your service rep having me make crime reports for a missing package (illegal btw) that I have insurance for? How can I be expected to provide docs from UPS, when your label only allow GOAT 2 make missing package claims? Never consign with GOAT Lost $1k @goatapp @flightclub
dambo retweeted
Over 9,000 confirmed checkouts across all members. Members collectively profiting $400,000+. No group even managed to get 3000. Want to cook with us? Join below while you can. $29.99 pricing option will be available for 48 hours only. Join Below👇
whop.com/checkout/plan_OznLH…




























