Trojan$ Hunters (TH)
前往频道在 Telegram
显示更多
未指定国家未指定类别
341
订阅者
无数据24 小时
+97 天
+730 天
帖子存档
Anon: "are you going to connect via OpenVPN to the capture-the-flag?"
Retard: "i have my own wireguard config"
1. They don't realize Discord doesn’t expose
ipcRenderer to renderer JS. Instead it exposes a limited preload API (DiscordNative)
2. That’s functionally the same as ‘no raw IPC access’, because renderer code can’t send arbitrary IPC messages or target handlers.
So any ‘IPC exploit’ would require a vulnerable function inside that exposed bridge not discovery of internal IPC handlers⚠️ JUST IN: Meet "Danny." Danny is a individual who is larping a "Remote Code Execution" (RCE) exploit in the Discord IPC handlers.
The individual appears to have no conceptual knowledge of electron security and is entirely unaware that Discord enforces
contextIsolation: true, rendering their alleged exploit completely useless.Here’s the provided chat export with the fake “threat actor” who has been larping about breaching INTERPOL
⚠️ JUST IN: @dilithm is reportedly larping about breaching INTERPOL to multiple individuals.
The individual has not provided a single proof-of-concept exploit and appears to have no knowledge of web exploitation.
