Chat, we've gone big league Last time on Dragon Ball Z, a few weeks ago I made a crappy little video of me bonking goop (malware) with a stick. In the video I mentioned I use IDA Pro, I believed it to be the best on the market, and said as an independent researcher I can easily afford (I used a cracked version). Following this silly video, I got an e-mail from the people who make IDA (Hex-Rays). I immediately believed they were going to yell at me, hit me over the head with a cinder block, or sue me, for using a cracked version of their very expensive product and displaying it in the video. Instead they told me they liked my goop video and they liked my goop posts. They also said they like vx-underground because they value the goop. So anyway, so instead of beating me over the head with a cinder block, they gave me IDA Pro Expert for free. wtf i love hex-rays

> be JayTaelien > security researcher > discovered Discord zero day exploit > send Twitch embed to victim > something something > massive exploit chain > arbitrary code execution > only requirement is victim clicking a Twitch embed > Discord confirms 1 ClickRCE > pays him $5,500 Dawg, someone get Discord on the horn and tell their CEO his company is a fucking piece of shit. This exploit is devastating and if this guy didn't tell them, and instead decided to weaponize it, he could have fucking destroyed end users. All bro would have had to do is be like. "Check out this Twitch streamers clip", and destroyed their machine, executing any malware they wanted arbitrarily, stealing data, whatever. Bro could have gone to large Discord channels, shared the link, potentially infecting thousands upon thousands of people effortlessly He could have down more precise operations targeting prominent streamers, moderators, celebrities known to use Discord, and fucking wiped them all out with anything he chose to execute Imagine if he sold this exploit to ransomware groups He could have made millions of dollars, easily Imagine if he went into a cryptocurrency Discord and the payload was a cryptodrainer. He could have drained entire communities in seconds And they paid bro $5,500 That's absolutely sickening. JayTaelien is a fucking saint and decides a much larger payouf

Yes, I've seen the posts about the Israeli mercenary spyware infecting mobile devices from ads on websites using zero day exploits, primarily targeting Palestinians and journalists. This is ... I think third or fourth ... Israeli firm which does something like this. Mobile spyware on this caliber unfortunately is not something I have been able to bonk. Mercenary spyware is notoriously difficult to detect and it is almost never shared publicly, in any capacity, it is usually shared with very specific researchers behind closed doors to bonk. When this sort of goop is identified it is kept close to the chest of security companies or researchers because they do not want the governments, or individuals developing it, to know what they know about their mobile goop. It's basically ultra mega fuck off super goop which can be acquired by ultra mega fuck off secret top secret goop acquisition specialists. I'm aware several governments purchase these sort of exploits and spyware and use it, including the United States government, specifically ICE I just don't have the goop bro