HTTP desync in Discord's media proxy: Spying on a whole platform
Using a HTTP desync attack to see what media.discordapp.net attachments are being viewed, in real time, across the entire platform.
read →◈ drag the cards around
↖ grab any card by its header bar to rearrange
❧ about me…
─□×
Hey, I'm shuuino - cs student (self-taught webdev though!), online 'activist' & aspiring cybersec specialist. This is a website I made in my free time to share stuff I find interesting online.
This site is a perpetual work in progress, so expect things to be broken or missing - I'm still learning and experimenting with new features and designs, and I have a long list of things I want to add but haven't gotten around to yet.
Feel free to steal code (though it's an absolute mess so good luck) or view the code on github.
♫ now playing
─□×
0:00
2:13
vol
◉ find me
─□×
⛅ weather
─□×
France
fetching…
⇢ friend links
─□×
nothing yet
✉ suggestions
─□×
got a suggestion?
dm me on discord -
site recs, music, bugs, anything.
i read everything!
◎ visitors
─□×
◈ my 88×31
─□×
embed code<a href="https://shuuino.party"><img src="https://shuuino.party/shuuino-88x31.gif" width="88" height="31" alt="shuuino.party" /></a>
◈ version
─□×
current version
3.2.1
⟳ site updates
─□×
loading…
📋 todo
─□×
- fix muuri grid margin fuckup
- Preload song when hovering over forward button
- Preload repost page when hovering over repost button
- Preload articles when hovering "read more" (if possible)
- Change entire article being an <a> to just "read more"
- hopefully fix Brave browser compatibility
- add auto-update version number
- make a python script to make updating the reposts easier
- add 404, 403, 500 page gifs
- fix footer gif
📊 feature poll
─□×
what should i add next?
✓ vote recorded
couldn't load poll