Pinned Tweet
How I was able to read any message on Discord without "VIEW_CHANNEL" or "READ_MESSAGE_HISTORY" permissions.
Simple vulnerability but a nice one!
bugcrowd.com/disclosures/9e0…
#security #discord #bugbounty
hear me out @svishnevskiy let me test the client and find security issues maybe >.< I'm friendly trust me
15
DarkerInk retweeted
“I used a calculator to-” Then you aren’t a mathematician.
“I used a tractor to-” Then you aren’t a farmer.
“I used a microscope to-” Then you aren’t a scientist.
This is how dumb the anti-AI people sound.
Got an entire PHP2Shell chain + a WAF bypass for @Cloudflare's CTF challenge, but cannot get the flag to be returned over http </3. I am able to run commands with system, but after that the worker dies
2
2
128
only #realones still do this
31
DarkerInk retweeted
The Evil Big Tops x Powerpuff Girls?!⚡ (and then caine would be mojo jojo mwehe 🐒)
Audio: Powerpuff Girls
#TADC #tadcfanart #TheAmazingDigitalCircus #TADC_fanart #animation #PPG #powerpuffgirls
all the peoples in the replies to this tweet complaining about what they wrote in the email are stupid, so what if you think its unprofessional, they should still respond xd
Multiple interactions with you Guys on the TL, discord tickets and many more 0 response yall good luck find the rest of it embedded in your hardware
1
48
I was given a $2,000 bonus :)
I earned $4,000 from @discord for my submission on @bugcrowd bugcrowd.com/h/darkerink #ItTakesACrowd
(pst., it was RCE)
1
29
You COULDNT HAVE FUCKING WAITED 14 Hours.
i hope your forever blacklisted from cybersec/related industries for dropping a unpatched critical 1day on twitter you fucking idiot
This quoted post is unavailable.
I only got 4k for rce where all you had to do was click an invite 💔
> be JayTaelien
> security researcher
> discovered Discord zero day exploit
> send Twitch embed to victim
> something something
> massive exploit chain
> arbitrary code execution
> only requirement is victim clicking a Twitch embed
> Discord confirms 1 ClickRCE
> pays him $5,500
Dawg, someone get Discord on the horn and tell their CEO his company is a fucking piece of shit. This exploit is devastating and if this guy didn't tell them, and instead decided to weaponize it, he could have fucking destroyed end users.
All bro would have had to do is be like. "Check out this Twitch streamers clip", and destroyed their machine, executing any malware they wanted arbitrarily, stealing data, whatever.
Bro could have gone to large Discord channels, shared the link, potentially infecting thousands upon thousands of people effortlessly
He could have down more precise operations targeting prominent streamers, moderators, celebrities known to use Discord, and fucking wiped them all out with anything he chose to execute
Imagine if he sold this exploit to ransomware groups
He could have made millions of dollars, easily
Imagine if he went into a cryptocurrency Discord and the payload was a cryptodrainer. He could have drained entire communities in seconds
And they paid bro $5,500
That's absolutely sickening. JayTaelien is a fucking saint and decides a much larger payouf
I earned $4,000 from @discord for my submission on @bugcrowd bugcrowd.com/h/darkerink #ItTakesACrowd
(pst., it was RCE)
I don't get why people need to lie about stuff like this xd just say the model is good at reverse engineering, don't make up stories like "oh I just asked it to enable ipv6 and it decided to look for vulnerabilities randomly and make a write up just like if you asked it to find vulnerabilities"
I asked Kimi to enable ipv6 in the background as I was doing something else.
Turns out it was not enabled on my router so, not having the admin password, it naturally then found the firmware online, decrypted it, extracted the lua bytecode, found out the opcodes were shuffled, updated the decompiler to work with it and found a stack-overflow in a binary it launched to get access.
Still didn't succeed though, since it figured attempting to trigger it would be ""crashing = disruption"" 😭
74






















