Denis Avakov denis-avakov

hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good faith of being accurate, but like I just said; we don't yet know everything about what's going on.

Update: I've disabled comments as of 2025-01-26 to avoid everyone having notifications for something a year on if someone wants to suggest a correction. Folks are free to email to suggest corrections still, of course.

Background

Transmit5 Never Ending Trial + free iCloud Sync (MacOS)

Transmit5 Brew install ⚙️
Transmit5 iCloud Settings Sync ☁️
Transmit5 Trial Reset (Script) ☠️

	#!/bin/bash

	# Hide the real cursor
	tput civis

	# Restore cursor on exit
	trap 'tput cnorm' EXIT

	# ANSI color codes
	BOLD="\033[1m"

	// 3D Dom viewer, copy-paste this into your console to visualise the DOM as a stack of solid blocks.
	// You can also minify and save it as a bookmarklet (https://www.freecodecamp.org/news/what-are-bookmarklets/)
	(() => {
	const SHOW_SIDES = false; // color sides of DOM nodes?
	const COLOR_SURFACE = true; // color tops of DOM nodes?
	const COLOR_RANDOM = false; // randomise color?
	const COLOR_HUE = 190; // hue in HSL (https://hslpicker.com)
	const MAX_ROTATION = 180; // set to 360 to rotate all the way round
	const THICKNESS = 20; // thickness of layers
	const DISTANCE = 10000; // ¯\\_(ツ)_/¯

	import clsx from "clsx";
	import {
	useEffect,
	useRef,
	useState,
	type HTMLAttributes,
	type ReactNode,
	type RefObject,
	} from "react";

	import { useCallback, useState } from "react";

	// Custom hook to copy text to clipboard
	const useCopyToClipboard = (timeoutDuration: number = 1000) => {
	const [copied, setCopied] = useState(false);
	const [error, setError] = useState<Error \| null>(null);

	const copyToClipboard = useCallback(
	async (text: string) => {
	try {