hi, i'm daniel. i'm a 16-year-old high school senior. in my free time, i hack billion dollar companies and build cool stuff.

about a month ago, a couple of friends and I found serious critical vulnerabilities on Mintlify, an AI documentation platform used by some of the top companies in the world.

i found a critical cross-site scripting vulnerability that, if abused, would let an attacker to inject malicious scripts into the documentation of numerous companies and steal credentials from users with a single link open.

(go read my friends' writeups (after this one))
how to hack discord, vercel, and more with one easy trick (eva)
Redacted by Counsel: A supply chain postmortem (MDL)

Quick guide on how to setup git signing. Information is aggregated from following sources:

• https://help.github.com/articles/signing-commits/
• https://help.github.com/articles/telling-git-about-your-signing-key/
• https://help.github.com/articles/generating-a-new-gpg-key/

git archive --format=tar.gz -o /tmp/my-repo.tar.gz --prefix=my-repo/ master

More detailed version: https://til.simonwillison.net/git/git-archive

Looking for a way to download files from pan.baidu.com (Baidu Netdisk) for free? Here’s a simple step-by-step tutorial using a third-party website that generates direct download links.