@hackermondev

breaking stuff

github.com/hackermondev
Joined November 2017
  • Tweets670
  • Following102
  • Followers6.3K
64Media
anyone outside the tech twitter bubbble clearly knows openai is winning the ai race. if you compare ai offerings between both companies, openai is significantly leading. anthropic spent most of their time building ai for coding which gave a lead initially..
4
13
2,941
but openai was able to catch up incredibly fast. today, they're both fairly on the same level in terms of coding. since openai focused on a variety of things beforehand, they have a variety of offerings for consumers, while anthropic isnt really good at anything else but coding
1
2
579
daniel retweeted
rekdt
@rekdtOct 5
Casually tapping the sign:
solst/ICE of Astarte
@IceSolstOct 5
Highest ROI for hiring a security engineer today than ever before. The tools are getting GOOD, like really good. You can find and fix bugs. You WILL find bugs, but you have to be looking. Either invest in seceng+tooling now, or spend ++money responding to incidents.
6
22
1
370
16,108
i used to love reading security writeups, i found it really interesting to see the thinking process behind how they found really impressive vulnerabilities. nowadays security writeups consist of prompting AI and effortlessly finding vulnerabilities with zero effort
10
28
2
400
13,996
http desync attack on discord !!
tmctmt@tmctmtApr 17
Spying on everybody's Discord attachments with HTTP desync tmctmt.com/posts/http-desync…

HTTP desync in Discord's media proxy (2022)

In 2022, I came across a quirky behavior on media.discordapp.net when I miskeyed a space character into an attachment link: a 502 bad gateway. After some fiddling I realized that this was caused by a...

tmctmt.com
3
10
292
42,047
You aren't "Building" anything when you just tell claude what to do, if you have a bot write a whole codebase for you it is no different than looking at someone elses code. If you have no idea what's where or how it's implemented it simply isn't Your code.
12
67
4
1,072
32,416
daniel retweeted
celeste
@vmfuncFeb 16
the watchers: how openai, the US government, and persona have been secretly running an identity surveillance system since nov 2023. vmfunc.re/blog/persona researched by @vmfunc, @MDLcsgo, @DziurwaF
124
827
144
4,190
500,038
we pwned x, vercel, cursor, and discord through a supply-chain attack news.ycombinator.com/item?id…
xyzeva@xyz3va18 Dec 2025
how to hack discord, vercel and more with one easy trick kibty.town/blog/mintlify/
16
62
6
1,421
212,806
daniel retweeted
xyzeva@xyz3va13 Dec 2025
CVE-2025-67842 CVE-2025-67843 CVE-2025-67844 CVE-2025-67845 CVE-2025-67846 w/ @hackermondev, @MDLcsgo
17
14
3
312
33,386
back in 2023, i found a vulnerability on Discord to grab a support ticket details using just it's id. ticket ids are incremental so an attacker could have enumerated the entire platform and stolen everything. i reported it to their bug bounty program. they marked it as an "High", refused to upgrade its severity, and then silently fixed it.
35
232
9
6,196
290,902
the recent Discord breach shows just how critical of a vulnerability this was. if someone else had stumbled upon this vulnerability, they could have very easily stolen thousands of government IDs and confidential data this is another classic example of how bug bounties are very scammy. Discord's response to the recent data breach shows just how severe this vulnerability could have been.
7
24
1
1,830
72,166
the hackerone employee who decided to change the dark theme needs to be fired
what the hell is this

ALT what the hell is this

16
4
2
140
19,100
you could essentially bypass any turnstile challenge during the outage. next cloudflare outage gonna be crazy
Cloudflare
@Cloudflare13 Jun 2025
Multiple Cloudflare services, including Workers KV, Access, WARP and the Cloudflare dashboard, experienced an outage for up to 2 hours and 28 minutes earlier today. Here's a detailed breakdown of what happened: blog.cloudflare.com/cloudfla…

Cloudflare service outage June 12, 2025

Today, June 12, 2025, Cloudflare suffered a significant service outage that affected a large set of our critical services, including Workers KV, WARP, Access, Gateway, Images, Stream, Workers AI,...

blog.cloudflare.com
1
2
38
5,930
Hackers, meet your new home. Claim your handle now⚡ we’d love your feedback or bug reports: [email protected] hackedin.net

hackedin

One profile for a security researcher's whole record. hackedin reads your verified HackerOne and Bugcrowd accounts, scores them, and puts them beside the write-ups you have published.

hackedin.net
9
18
2
120
20,318
i've been working on a security tool that i genuinely think will revolutionize web security research just a few more things to do..
5
2
142
12,289
daniel retweeted
xyzeva@xyz3va28 Feb 2025
how to gain code execution on millions of people and hundreds of popular apps and of course, firebase was (partially) the cause kibty.town/blog/todesktop/
99
275
85
3,191
698,513
the creator of doxbin was pwned through a calorie counter app
20
102
12
2,785
138,497
long article but its a really interesting OSINT investigation into Doxbin's original owner nacha.sh/
3
7
1
244
21,877
A bug in Cloudflare (and just the nature of how CDNs work) let an attacker learn the broad location of Discord, Signal, Twitter users by just sending them an image, according to a researcher. It works because you check which data center cached the image 404media.co/cloudflare-issue…

Cloudflare Issue Can Leak Chat App Users' Broad Location

A security researcher made a tool that let them quickly check which of Cloudflare's data centers had cached an image, which allowed them to figure out what city a Discord, Signal, or Twitter/X user...

404media.co
37
497
38
1,823
116,817
Research into a unique 0-click deanonymization exploit targeting Signal, Discord and hundreds of platform 🧵
102
462
104
4,221
421,117
gist.github.com/hackermondev…

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform

Unique 0-click deanonymization attack targeting Signal, Discord and hundreds of platform - research.md

gist.github.com
16
112
26
823
69,949
Load more