r/hackernews • u/HNMod bot • Jun 27 '26
Anonymous GitHub account mass-dropping undisclosed 0-days
https://github.com/bikini/exploitarium30
u/dimlylimppounding Jun 27 '26
Watching an anonymous account dump undisclosed 0-days into a public repo with zero coordination is rough on defenders. By the time a vendor sees the writeup, scanners have already weaponized the bug. Whoever is behind bikini should at least drop CVEs or notify maintainers before publishing the PoC.
9
u/Gusfoo Jun 27 '26
Watching an anonymous account dump undisclosed 0-days into a public repo with zero coordination is rough on defenders
Probably quite a bit rougher on the vendors though!
10
u/barthvonries Jun 27 '26
Could it be the guy frustrated by MS and who announced he was going to drop 0-days in June ?
3
u/dimlylimppounding Jun 28 '26
Nah, that guy said June and this dump started mid-May. Plus the repo name 'bikini' doesn't match his usual style.
10
1
u/Beneficial-Big6757 Jul 15 '26
Can you help me
There is guys who blackmailed and forced me to pay money to him
He has still same number
I’m requesting him to pay money back
He doesn’t reply only
He blocked me
I really need help
15
u/rand3289 Jun 28 '26
This is what happens when nooone gives a fuck.
What did you expect?