↓ Skip to main content

“Please do not abuse these. I do this so to allure people into the field, and I’ve always found this is the most efficient way.”

bikinigithub.com ↗

An anonymous account is dumping working exploits for undisclosed bugs and telling readers to go file the CVEs themselves. The “please don’t abuse these” disclaimer is doing a lot of work next to a folder of live proof-of-concepts. Call it recruitment, call it a zero-day fire sale. Either way the vendors who sat on these bugs are the ones who created the conditions for a stranger to do this. Responsible disclosure only works when the other side bothers to respond.