Noah OGoodness

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

Gremlin Cheat Sheet in Groovy

Gremin traversal examples taken from the excellent DS330: DataStax Enterprise Graph course.

Creating Vertices and Vertex Properties

Add a Vertex

Vertex u = graph.addVertex("user");
       u.property("userId","u2016");
 u.property("age",36);

	// ==UserScript==
	// @name Open Plex Serach Page on Enter
	// @namespace https://app.plex.tv
	// @version 1.1
	// @description Open the Plex search page when pressing enter in the search box.
	// @author JonnyWong16
	// @homepage https://gist.github.com/JonnyWong16/1ebd38a5f5872408e5b840ed28006dec
	// @downloadURL https://gist.github.com/JonnyWong16/1ebd38a5f5872408e5b840ed28006dec/raw/openPlexSearch.user.js
	// @updateURL https://gist.github.com/JonnyWong16/1ebd38a5f5872408e5b840ed28006dec/raw/openPlexSearch.user.js
	// @match https://app.plex.tv/*

	if(!process.env.FLYWAY_ENV ) {
	const capturePostgres = require('aws-xray-sdk-postgres');
	capturePostgres(require('pg'));
	}
	const pgPromise = require('pg-promise')();

	module.exports.dbConfig = ({
	host: process.env.DB_HOST,
	user: process.env.DB_USER,
	password: process.env.DB_PASS,


	###
	# ▶ go get -u github.com/lc/gau
	# ▶ go get -u github.com/tomnomnom/qsreplace
	# ▶ go get -u github.com/tomnomnom/hacks/kxss
	# ▶ go get -u github.com/hahwul/dalfox
	# ▶ git clone https://github.com/dwisiswant0/DSSS
	###

	gauq() {

	echo "Blind SSRF testing - append to parameters and add new parameters @hussein98d"
	echo "Usage: bash script.sh domain.com http://server-callbak"
	echo "This script uses https://github.com/ffuf/ffuf, https://github.com/lc/gau, https://github.com/tomnomnom/waybackurls"
	if [ -z "$1" ]; then
	echo >&2 "ERROR: Domain not set"
	exit 2
	fi
	if [ -z "$2" ]; then
	echo >&2 "ERROR: Sever link not set"
	exit 2

 import React from "react"
 import { CognitoUser } from "@aws-amplify/auth"
 import { useAuth } from "./hooks"
 import { SignInInput } from "./types"
 interface AuthState {
   user: CognitoUser | null
   signIn(input : SignInInput): Promise<void>
   signOut(): Promise<void>

	for img_path in img_paths:
	print (img_path)
	mat = io.loadmat(img_path.replace('.jpg','.mat').replace('images','ground-truth').replace('IMG_','GT_IMG_'))
	img= plt.imread(img_path)
	k = np.zeros((img.shape[0],img.shape[1]))
	gt = mat["image_info"][0,0][0,0][0]
	for i in range(0,len(gt)):
	if int(gt[i][1])<img.shape[0] and int(gt[i][0])<img.shape[1]:
	k[int(gt[i][1]),int(gt[i][0])]=1
	k = gaussian_filter_density(k)

	using System;
	using System.Linq;
	using System.Collections;
	using System.Collections.Generic;
	using System.Reflection;
	using System.Reflection.Emit;
	using UnityEngine;
	using UnityEditor;

	###
	###
	### UPDATE: For Win 11, I recommend using this tool in place of this script:
	### https://christitus.com/windows-tool/
	### https://github.com/ChrisTitusTech/winutil
	### https://www.youtube.com/watch?v=6UQZ5oQg8XA
	### iwr -useb https://christitus.com/win \| iex
	###
	### OR take a look at
	### https://github.com/HotCakeX/Harden-Windows-Security