g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
@giuseppesec.bsky.social
dad software in femboy hardware | i can be trusted with web apps 🙂
Pinned
giuseppesec
just hacking stuff and vibing bro 😎
youtube.com
hey i make videos on hacking stuff sometimes. check it out or something
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
Real PoC for react4shell
Okay, this looks like the real McCoy: gist.github.com/maple3142/48...
CVE-2025-55182.http
GitHub Gist: instantly share code, notes, and snippets.
gist.github.com
December 4, 2025 at 10:35 PM
Real PoC for react4shell
@rebane2001.bsky.social justice used your captcha clickjack stuff on a frameable api endpoint to get a csrf token. thanks! :3
December 4, 2025 at 7:48 PM
@rebane2001.bsky.social justice used your captcha clickjack stuff on a frameable api endpoint to get a csrf token. thanks! :3
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
my new blogpost is out!!
this one talks about a new web vulnerability class i discovered that allows for complex interactive cross-origin attacks and data exfiltration
and i've already used it to get a google docs bounty ^^
have fun <3
lyra.horse/blog/2025/12...
this one talks about a new web vulnerability class i discovered that allows for complex interactive cross-origin attacks and data exfiltration
and i've already used it to get a google docs bounty ^^
have fun <3
lyra.horse/blog/2025/12...
SVG Filters - Clickjacking 2.0
A novel and powerful twist on an old classic.
lyra.horse
December 4, 2025 at 2:03 PM
my new blogpost is out!!
this one talks about a new web vulnerability class i discovered that allows for complex interactive cross-origin attacks and data exfiltration
and i've already used it to get a google docs bounty ^^
have fun <3
lyra.horse/blog/2025/12...
this one talks about a new web vulnerability class i discovered that allows for complex interactive cross-origin attacks and data exfiltration
and i've already used it to get a google docs bounty ^^
have fun <3
lyra.horse/blog/2025/12...
the poc i posted is ai generated slop. i love the era of misinfo
December 4, 2025 at 3:57 AM
the poc i posted is ai generated slop. i love the era of misinfo
time to look through someone's patch history
Critical RCE Vulnerabilities Discovered in React & Next.js | Wiz Blog
React and Next.js are exposed to critical unauthenticated RCE via CVE-2025-55182 and CVE-2025-66478. Learn which versions are impacted and how to mitigate.
www.wiz.io
December 3, 2025 at 8:01 PM
time to look through someone's patch history
gay goth band: boy division
December 3, 2025 at 6:51 PM
gay goth band: boy division
lets all give thanks for the allies in our lives who post so hard today
November 27, 2025 at 5:53 PM
lets all give thanks for the allies in our lives who post so hard today
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
unironically loving 40% keyboards now. they're just so cute and convenient and i like people not knowing my configs
November 25, 2025 at 5:17 PM
unironically loving 40% keyboards now. they're just so cute and convenient and i like people not knowing my configs
"if people are mad you're doing something right" is the biggest cope for mediocre losers
November 25, 2025 at 4:53 PM
"if people are mad you're doing something right" is the biggest cope for mediocre losers
if you ever replied to someone with "and you're surprised?" they should be allowed to punch you
November 20, 2025 at 1:42 AM
if you ever replied to someone with "and you're surprised?" they should be allowed to punch you
will never understand how anyone could ever become a sex pest undercover any circumstances even in patriarchy, rape culture, and capitalism encouraging the commodification of fem bodies as sex objects. even devoid of ethics and understanding of power dynamics, you can just use your fucking hand
November 19, 2025 at 5:55 PM
will never understand how anyone could ever become a sex pest undercover any circumstances even in patriarchy, rape culture, and capitalism encouraging the commodification of fem bodies as sex objects. even devoid of ethics and understanding of power dynamics, you can just use your fucking hand
anti gen-ai luddism is the only logical response
This is a nuts story. An AI chatbot and image platform left millions of images exposed. They show what people are actually using the AI for: taking random women's yearbook, graduation, and social media photos and making super realistic hardcore porn with them
www.404media.co/ai-porn-secr...
www.404media.co/ai-porn-secr...
Massive Leak Shows Erotic Chatbot Users Turned Women’s Yearbook Pictures Into AI Porn
Chatbot roleplay and image generator platform SecretDesires.ai left cloud storage containers of nearly two million of images and videos exposed, including photos and full names of women from social me...
www.404media.co
November 19, 2025 at 5:43 PM
anti gen-ai luddism is the only logical response
i am aware of all my trans homies 👀
November 19, 2025 at 3:28 PM
i am aware of all my trans homies 👀

November 19, 2025 at 3:27 PM

Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
when will the lesson finally get learned? #cloudflare
November 18, 2025 at 2:01 PM
when will the lesson finally get learned? #cloudflare
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
Bluesky adopting a "we will ban anyone who is mean to pedophiles" moderation posture is confusing until you remember it was started by a bunch of tech libertarians as a haven for Ai cultists and crypto guys.
November 14, 2025 at 4:56 PM
Bluesky adopting a "we will ban anyone who is mean to pedophiles" moderation posture is confusing until you remember it was started by a bunch of tech libertarians as a haven for Ai cultists and crypto guys.
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
Epstein files (121 GB)
A collection of documents, emails, and recordings relating to Jeffrey Epstein, including his FBI and Interpol files, court documents, releases from the DOJ and Congress, and leaked emails.
ddosecrets.com/article/epst...
Help us keep publishing: donorbox.org/supporting-d...
A collection of documents, emails, and recordings relating to Jeffrey Epstein, including his FBI and Interpol files, court documents, releases from the DOJ and Congress, and leaked emails.
ddosecrets.com/article/epst...
Help us keep publishing: donorbox.org/supporting-d...
Epstein files - Distributed Denial of Secrets
A collection of documents, emails, and recordings relating to Jeffrey Epstein, including his FBI and Interpol files, court documents, releases from the Department of Justice and Congress, and leaked…
ddosecrets.com
November 14, 2025 at 1:36 PM
Epstein files (121 GB)
A collection of documents, emails, and recordings relating to Jeffrey Epstein, including his FBI and Interpol files, court documents, releases from the DOJ and Congress, and leaked emails.
ddosecrets.com/article/epst...
Help us keep publishing: donorbox.org/supporting-d...
A collection of documents, emails, and recordings relating to Jeffrey Epstein, including his FBI and Interpol files, court documents, releases from the DOJ and Congress, and leaked emails.
ddosecrets.com/article/epst...
Help us keep publishing: donorbox.org/supporting-d...
making a browser, let alone a browser engine is so ridiculously hard they know we at best all anyone can do it fork it, and most forks run out of steam in a couple years. to think i was hyped for servo
Mozilla is so funny because basically their market is "look some people want a browser that's not Safari or Chrome" and that's a market with very clear and specific desires in the tech products they wish to consume and they keep fucking it up like every six months
Mozilla deployed an AI bot that overwrote 20 years of volunteer Japanese translations, without consultation. JP community leader resigned, and the offer from Mozilla is to "hop on a quick call to understand why they're struggling". FFS.
HN discussion: news.ycombinator.com/item?id=4583...
HN discussion: news.ycombinator.com/item?id=4583...
November 7, 2025 at 5:20 PM
making a browser, let alone a browser engine is so ridiculously hard they know we at best all anyone can do it fork it, and most forks run out of steam in a couple years. to think i was hyped for servo
women destroyed the west? based
November 7, 2025 at 1:51 PM
women destroyed the west? based
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
SQLI in Django. If impacted, please update your apps. Patched Django versions are 5.2.8, 5.1.14, or 4.2.26.
Critical SQL Injection Vulnerability in Django (CVE-2025-64459) | Blog | Endor Labs
Critical SQL Injection Vulnerability in Django (CVE-2025-64459). Learn what happened, root cause, impact, and how to mitigate.
www.endorlabs.com
November 6, 2025 at 8:28 PM
SQLI in Django. If impacted, please update your apps. Patched Django versions are 5.2.8, 5.1.14, or 4.2.26.
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
Zohran says you’re trans now
November 5, 2025 at 5:04 PM
Zohran says you’re trans now
i support evil people dying
November 4, 2025 at 9:07 PM
i support evil people dying
Reposted by g̸͕̊i̴̜̽u̴̟̒ş̶͝ȇ̴̼p̸̻͐p̶̯̃e̸̯̾(ᵇᵒʸ-ᵈⁱᵛⁱˢⁱᵒⁿ)
