NDevTK @ndevtk

Still pretending to be a security researcher. github.com/NDevTK Joined September 2021

Tweets

317
Followers

1K
Following

108
Likes

823

NDevTK @ndevtk

6 days ago

Bug write-up for "Controlling the Google Assistant via Web Speech API" ndevtk.github.io/writeups/2025/… *^____^*

3 13 89 5K 61

NDevTK @ndevtk

4 weeks ago

My YouTube channel is now un-deprecated 🎉 Android lock screen data leak Minecraft video PoC can now be found at youtube.com/watch?v=TUysaj…

0 0 4 544 1

Jun Kokatsu @shhnjk

a month ago

LOL, my YouTube account/channel got terminated, and all PoC videos are gone 😂

7 4 46 25K 4

Derin Eryilmaz @deryilz

2 months ago

🔥Blog post is up! How extensions could exploit JS bindings to use webRequestBlocking prior to Chrome 118: 0x44.xyz/blog/web-reque…

1 17 48 4K 26

Been automating chromium security research using AI agents with codebase learning, VRP insights and research tracking tools. While the agent will remain private there's a nice tool for interfacing with chromium services github.com/hjanuschka/chr… now with V8 support 🥳

0 2 13 1K 5

NDevTK @ndevtk

3 months ago

OriginMarker (Origin dependent marker) version 1.4 chrome extension is released chrome.google.com/webstore/detai… now with pre-set Markers for common websites github.com/NDevTK/OriginM… strangely not given up with the extension yet.

0 0 1 501 0

NDevTK @ndevtk

3 months ago

¯\_(ツ)_/¯

Jose Rodriguez @VBarraquito

3 months ago

¯\_(ツ)_/¯

0 0 2 958 0

0 0 1 459 0

NDevTK @ndevtk

3 months ago

Bug write-up for "Android lock screen data leak" ndevtk.github.io/writeups/2025/… ╰(*°▽°*)╯

3 28 146 9K 78

NDevTK @ndevtk

3 months ago

Used an LLM to create extra themes for ndevtk.github.io/writeups/ I noticed the base64 theme was to easy to read so there's now a emoji option which further encodes the output.

1 0 2 663 2

NDevTK @ndevtk

4 months ago

Decided to skip testing and deploy the following: chromewebstore.google.com/detail/postlog… the console.log now has a space :) chromewebstore.google.com/detail/request… Shortcut partitioning, a threat model I made up. chromewebstore.google.com/detail/autopau… added a feature to ask for permission... API just crashes 🦆

1 2 15 2K 14

NDevTK @ndevtk

5 months ago

Quack Quack Quack my legacy Minecraft mod is now open source github.com/NDevTK/MCMod/ I still don't know Java just search for "intent://" URLs. 🦆

0 0 3 613 0

NDevTK @ndevtk

5 months ago

Generic fixed postMessage XSS on OKX cryptocurrency exchange youtu.be/Se463wvub64

1 6 42 4K 16

NDevTK @ndevtk

5 months ago

It appears with Gemini 2.5 pro creating an LLM wiki for chromium security research is a lot more practical. Does anyone want to collaborate on this? github.com/ndevtk/chromiu… in return you may find a bug! Otherwise I will go back to the random post about XSS system.

0 1 5 1K 3

NDevTK @ndevtk

5 months ago

Testing the new Chrome ai.summarizer API for the summarizer theme on ndevtk.github.io/writeups/ its patched so that COOP isn't "Connection Orca Protection" but still unreliable.