Tommy DeVoss MEMBER_OF TDK
Tommy says he eventually joined the IRC hacker crew TDK, short for Those Damn Kids.
Explicit Confidence 99% · Jack Rhysider EP 60 Details
“he eventually joined an IRC hacker crew called TDK”
Episode
03 March 2020 Official episode · Official transcript
bug hunter black hat
The episode features Tommy DeVoss, known online as dawgyg, describing his progression from illegal hacking and federal imprisonment to earning substantial income through legal bug-bounty programs.
Topics: IRC and EFnet channel takeovers, DDoS attacks and server splits, Website defacement, Computer Fraud and Abuse Act prosecutions, Bug-bounty platforms, Exposed credentials and internal information in public gists, ImageMagick remote code execution, Server-side request forgery, Blacklist bypasses, Capture-the-Flag security training, Government bug-bounty programs
Links published on the Darknet Diaries episode page. Not LLM output.
Qualified statements from this episode, not graph facts.
Tommy DeVoss MEMBER_OF TDK
Tommy says he eventually joined the IRC hacker crew TDK, short for Those Damn Kids.
Explicit Confidence 99% · Jack Rhysider EP 60 Details
“he eventually joined an IRC hacker crew called TDK”
TDK members built botnets to identify servers associated with operators in target rooms.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“We would build botnets to go and check every single op in our target room”
TDK used DDoS attacks against servers as part of IRC network conflicts.
Explicit Confidence 99% · Jack Rhysider EP 60 Details
“Then we’d DDoS that server to split it off in the network”
TDK USES server split
TDK used server splits to isolate servers and take over IRC channels.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“DDoS that server to split it off in the network and then they’d just basically take over the channel”
Tommy DeVoss USES DDoS
Tommy says he DDoSed his school’s IP address to take down its internet connection.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I would actually DDoS my school’s IP address to take our internet down”
Tommy DeVoss MEMBER_OF World of Hell
Tommy says he started hacking with World of Hell and later describes defacing a website as part of that group.
Explicit Confidence 98% · Jack Rhysider EP 60 Details
“so he started hacking with World of Hell”
“I defaced my first website as part of World of Hell”
RaFa MEMBER_OF World of Hell
RaFa is described as a member of World of Hell.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I got in contact with a guy named RaFa who was a member of World of Hell”
World of Hell USES Website defacement
World of Hell carried out website defacement, including defacements performed by Tommy as part of the group.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I defaced my first website as part of World of Hell”
World of Hell TARGETS Yahoo
Tommy lists Yahoo.com.ph among the sites he or World of Hell targeted during their defacement activity.
Explicit Confidence 88% · Tommy DeVoss EP 60 Details
“Yahoo.com.ph, nokia.com, sony.com”
Tommy DeVoss USES AltaVista
Tommy says Dznutz instructed him to use Yahoo AltaVista to read material about hacking.
Explicit Confidence 96% · Tommy DeVoss EP 60 Details
“The first thing that he told me was go to Yahoo AltaVista. He was like, read everything that you can find about hacking.”
Tommy DeVoss MENTIONS Computer Fraud and Abuse Act
Tommy says he was charged with violating the Computer Fraud and Abuse Act after using the internet to make the bomb threat.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I was actually charged with violating The Computer Fraud and Abuse Act”
Tommy DeVoss USES HackerOne
Tommy used HackerOne’s bug-bounty platform to report vulnerabilities and receive rewards.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I reported my first bug on HackerOne to Yahoo in March of 2016”
Tommy DeVoss EXPLOITS ImageMagick remote code execution vulnerability
Tommy says he used the public ImageMagick remote code execution vulnerability to obtain remote code execution on two Yahoo servers.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I actually got remote code execution on two of Yahoo’s servers using that”
Tommy DeVoss USES remote code execution
Tommy obtained remote code execution on Yahoo servers through the ImageMagick vulnerability.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I actually got remote code execution on two of Yahoo’s servers”
ImageMagick remote code execution vulnerability AFFECTS ImageMagick
The episode identifies the issue as an ImageMagick remote code execution vulnerability and explains that malicious image uploads could provide access to a website.
Explicit Confidence 98% · Tommy DeVoss EP 60 Details
“ImageMagick remote code execution vulnerability was public at that time”
“websites let you upload an image but you could send a malicious image to it”
Tommy DeVoss USES blacklist bypass
Tommy found a way to bypass Nexus RF’s blacklist.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I found a bypass for their blacklist that they had used”
Tommy DeVoss USES SSRF
Tommy used the blacklist bypass across multiple endpoints for SSRF testing.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“I ended up being able to bypass the blacklist in a total of fifteen or sixteen different end points for SSRF”
H1-415 is described as a nine-hour hackathon put on by HackerOne.
Explicit Confidence 99% · Jack Rhysider EP 60 Details
“This is a nine-hour hackathon put on by HackerOne in San Francisco”
H1-415 INVOLVES Tommy DeVoss
Tommy attended H1-415 and earned $101,000 during the event, receiving the Most Valuable Hacker distinction.
Explicit Confidence 99% · Jack Rhysider EP 60 Details
“Tommy went and he was finding bug after bug and reporting them”
“he earned $101,000 which gave him the coveted MVH, Most Valuable Hacker”
Tommy DeVoss ASSOCIATED_WITH HackerOne
HackerOne announced that Tommy was the sixth hacker on its site to make one million dollars; Jack says he confirmed this with HackerOne’s announcement.
Attributed Confidence 99% · Jack Rhysider EP 60 Details
“HackerOne themselves has announced that Tommy was the sixth hacker on their site to make one million dollars”
Tommy DeVoss MENTIONS Edward Snowden
Tommy cites Edward Snowden’s 2013 leaks when arguing that online activity is monitored by the US government.
Explicit Confidence 99% · Tommy DeVoss EP 60 Details
“Thanks to Edward Snowden’s leaks back in 2013”
Works mentioned in the transcript. Distinct from show-note sources.
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T06:19:00.369618+00:00