Skip to content

Instantly share code, notes, and snippets.

@zi3lak
zi3lak / zendesk.md
Created October 14, 2024 15:43 — forked from hackermondev/zendesk.md
1 bug, $50,000+ in bounties, how Zendesk intentionally left a backdoor in hundreds of Fortune 500 companies

hi, i'm daniel. i'm a 15-year-old with some programming experience and i do a little bug hunting in my free time. here's the insane story of how I found a single bug that affected over half of all Fortune 500 companies:

say hello to zendesk

If you've spent some time online, you’ve probably come across Zendesk.

Zendesk is a customer service tool used by some of the world’s top companies. It’s easy to set up: you link it to your company’s support email (like [email protected]), and Zendesk starts managing incoming emails and creating tickets. You can handle these tickets yourself or have a support team do it for you. Zendesk is a billion-dollar company, trusted by big names like Cloudflare.

Personally, I’ve always found it surprising that these massive companies, worth billions, rely on third-party tools like Zendesk instead of building their own in-house ticketing systems.

your weakest link

@zi3lak
zi3lak / crypt.py
Created October 5, 2021 16:13 — forked from helium876/crypt.py
Crypto
#Cryptography suite!
import itertools
alphabetLower = "abcdefghijklmnopqrstuvwxyz"
alphabetUpper = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"
def encrypt_caesar(plaintext):
@zi3lak
zi3lak / erc20token.sol
Created May 2, 2020 11:28 — forked from jonchurch/erc20token.sol
ERC20 Sample Limted Supply Token
pragma solidity ^0.4.8;
// ----------------------------------------------------------------------------------------------
// Sample fixed supply token contract
// Enjoy. (c) BokkyPooBah 2017. The MIT Licence.
// ----------------------------------------------------------------------------------------------
// ERC Token Standard #20 Interface
// https://github.com/ethereum/EIPs/issues/20
contract ERC20Interface {
### Keybase proof
I hereby claim:
* I am zi3lak on github.
* I am zi3lak (https://keybase.io/zi3lak) on keybase.
* I have a public key ASC2am8FcccD0Q5X8_xKbJwJuxqcYTlFJvuA7HbZqcr1HAo
To claim this, I am signing this object: