#1 skybucks millionaire @richardwrites672.bsky.social · 12/08/2024oh wow, twexit's back, i sure hope adrianus has done literally anything to improve his website's security 160
#1 skybucks millionaire @richardwrites672.bsky.social · 26/05/2024Pro tip: you can send messages from banned accounts, and people will still receive it (although the message is only visible in the preview) 010
Reposted by #1 skybucks millionairemimonelu 🦀 みもねる @mimonelu.net · 26/05/2024SkyBucksというスパムDMが一部で横行しているようです。コードのコメントを見る限りイタズラっぽいんですが、リンク先には飛ばないようにしましょう(キーストロークなどもトラッキングされているようなのでアカパスとか入力しちゃダメ)。ちなみにClaim Giftすると「Blueskyに広告を出稿したりポストに色を付けられる」らしいです。すごいね 0143228
#1 skybucks millionaire @richardwrites672.bsky.social · 09/03/2024Here's a screenshot of BitView's admin panel. 330
Reposted by #1 skybucks millionaireSkyname @skyna.me · 16/01/2024Skyname is back online. Please read below for a detailed postmortem of the incident: darn.blog/2024-01-14-s... 0207
Reposted by #1 skybucks millionaireSkyname @skyna.me · 14/01/2024Skyname experienced a brief incident today where a malicious third party was able to overwrite DNS records pointing to registered usernames. All usernames have been successfully restored, and you should expect to see yours update in 24-48 hours if you're still seeing Invalid Handle. 1111
#1 skybucks millionaire @richardwrites672.bsky.social · 14/01/2024I now control every skyname handle :) (Well, every skyname handle that has appeared in plc.directory/export ) 031
#1 skybucks millionaire @richardwrites672.bsky.social · 28/12/2023@twexit.nl @adrianus.twexit.nl Check your twitter DMs 100
#1 skybucks millionaire @richardwrites672.bsky.social · 26/12/2023By the way, this isn't just twexit and mastochist. Every single website that Adrianus has ever made is vulnerable to SQLi. 4468
#1 skybucks millionaire @richardwrites672.bsky.social · 25/12/2023Merry christmas. mastodon.nl/@adrianus/11... archive.is/kwqQB 040
#1 skybucks millionaire @richardwrites672.bsky.social · 22/12/2023There it is. Seems like twexit is actually dead now-- no page is working anymore. twexit.nl archive.is/LJnFd (For clarity's sake-- I am not the one that put the image on the website. That seems to have been the action of the actual admin of the site.) 070
#1 skybucks millionaire @richardwrites672.bsky.social · 22/12/2023Finally, here's XSS in twexit post-shutdown 6v.pages.dev/final :) 010
#1 skybucks millionaire @richardwrites672.bsky.social · 22/12/2023Alright, looking into it more it seems the sql injection bug I found isn't actually exploitable in terms of getting database contents, just calling some functions. Could be wrong, though. If anyone else wants to give it a try: POST twexit.nl/js_output_te... w/ data first=0(sql here) 130
#1 skybucks millionaire @richardwrites672.bsky.social · 22/12/2023database() like 'admin_twexit' (this bug is very annoying to exploit) 010
#1 skybucks millionaire @richardwrites672.bsky.social · 21/12/2023Just pushed an update to the payload that will hopefully sign everyone out from twexit that views an affected user/clicks the link. I have no confidence that twexit will actually invalidate the PHPSESSID but hopefully the redirect will get people to revoke their app passwords. 280