Bluesky is a repository containing exploit modules that make it easier to create new modules for discovering vulnerabilities. The author of this content has found security vulnerabilities in Bluesky and atproto, but Bluesky has not been responsive to the reports. Even when another security researcher reported a similar issue, Bluesky did not acknowledge or follow up with the author. Frustrated by Bluesky’s lack of attention to security, the author has released exploit tools to force them to take security seriously. Additionally, the content includes information on using Bluesky, such as building and executing exploits. Surprisingly, Bluesky is written in TypeScript. The author can be contacted via email or Mastodon.
https://github.com/qwell/bsky-exploits