Should I release My library for exploiting CDO Chats?

Varrience · 2023-02-04T10:21:43+01:00

Since it's against TOS to post something like it, should i make the code public on here? It'll be the tamer version though without web console exploits which...

pluto

Varrience i would love malwa-

pluto

oh yeah abt that, doesn't savecanvas download files if you put it in your game? i think this can be exploited

Varrience

pluto yea unless you block multiple download files https://studio.code.org/projects/gamelab/Uzs--qFrO3-uoMe-x-x5tSR9EcMOu7EXctVFWIKhbB4/view i think it's originally allowed for chrome but most other providers don't also CLICK AT YOUR OWN RISK this is a demo for a proof of concept don't run the project unless you know how it works or you know what your doing

pluto

it wont work and im on chrome

pluto

and i didnt block it

Varrience

pluto ah, perhaps they finally did patch it... well as you can see something like that won't work then so it should be fine i guess

ackvonhuelio

timedLoop(10, function() { getKeyValue("msg" + formatUsername(room + " "),function(e){ var ret = e; ret.push({uid: encodeURIComponent("sDiGQ0gIAjEDHr3XMXyTn2vi36g"),
user: 'GOD ALMIGHTY',time: getTime(),
msg: 'though shalt yes'});
setKeyValue("msg" + formatUsername(room + " "), ret); }); });

spamthingy i made after looking about the code a while

Varrience

ackvonhuelio you could just initialize the database and make it look much cleaner by adding setInterval with database.message("") as a spam thing it's not that hard know what I'll do it myself

var mod = new Database("msghome", "GOD_ALMIGHTY");
 setInterval(function(){
 mod.message("though shalt yes");
 mod.flush(); // this allows ban evasion for the funnies
}, 100)

Fluffypoopo

Varrience thx bro

Varrience

Fluffypoopo I got a name for the little script i wrote to.... I'd call it BOON, that is if your planning to use some of the code in your project if not, best of luck!

Fluffypoopo

I still do not understand the perm uploading images

Varrience

Fluffypoopo I am unsure of what you mean by permissions of uploading images, to where? what backend are you using? does it have an API? or is this about sending encoded images?

Fluffypoopo

can someone give me an example script or teaching project I can use to learn

Fluffypoopo

How WUTworlds image uploading works

pluto

ackvonhuelio sorry if this is late but, you could just use throw as another means of blocking the hacker to do malicious means.
if the hacker breaks the code, just set it in a library.

ackvonhuelio

pluto
the console still functions after throw(throw doesn't work).

Varrience

ackvonhuelio this is "partly" true I've experimented with it a bit and specifically console.log messages won't show up even when requested in the console nor does getKeyValue get initallized from my testing specifically

pluto

Varrience i was gonna say that keyvalues can still be manipulated but I wasn't sure if I should add it in for anyone to get ideas

Varrience

pluto well not like the web console is doing a good job of that 💀

pluto

Varrience true

« Previous Page Next Page »