Writing
Blog
My silly little corner of the internet where I write about random things
How We Owned Every FantaSanremo Account in 2 HTTP Requests
A NoSQL injection in AppFactory's shared auth code hit the entire Fanta* suite. Any account, any platform, 0-click
ExternalHow We Broke McDonald's Italy From the Inside Out
Automating the anniversary Snake game, reversing client-side validation, and uncovering major flaws
Fix 'Failed to Open \efi\ubuntu\' GRUB Error on Linux Mint
Step-by-step guide to resolve GRUB bootloader failures on older Linux Mint systems
ShowHiddenChannels: How It Reveals Everything
How a simple permission override reveals everything and why Discord's security model is fundamentally flawed
How to get your Genshin Impact UID without opening the game
Retrieve your UID directly from the browser using developer tools without needing to launch the full game client
ExternalFree Nuggets
Reverse-engineered a fast-food game, exploited client-side logic for immortal runs, and won a year of free nuggets
ExternalGrew a Twitter Bot to 80K Followers and Made Money Doing Nothing
A deep dive into Twitter automation: from a casual social experiment to a surprisingly profitable side hustle
ExternalMaking a Spotify Bot that follows everyone
A dive into bots that automatically follows every user, technical challenges and ethical considerations
Deobfuscating RoLinked, the Bookmarklet That Steals Roblox Accounts in Real Time
A 490KB obfuscated bookmarklet that phishes your Roblox 2FA live, deletes your parental PIN, and swaps your email and…
How a Windows Defender Alert Uncovered a Multi-Stage Backdoor Hiding in a FiveM Server
A friend's FiveM VPS tripped Windows Defender. Underneath was a backdoor injected into resource scripts, phoning home…