Notings of Attention™
Acmlmboard 2 Released
Github/GIT | @acmlmboard | IRC: #abdev
Chatting Places
IRC: #kafuka | Discord | Mastodon

Affiliates
Super Mario Bros. X | Kuribo64
Views: 7,144,120
Main | FAQ | IRC chat | Memberlist | Active users | Latest posts | Stats | Ranks | Online users | Search
06-17-21 08:25 AM
Guest: Register | Login

0 users currently in Craziness Domain 二番: Kuchi Kopi's Bar | 1 bot

Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands
Next newer thread | Next older thread

Pages: 1 2 3

Thieppy
Posted on 04-28-18 10:40 AM (rev. 6 of 04-29-18 06:07 PM by Thieppy) Link | ID: 131365
Normal User

Level: 103


Posts: 2385/3450
EXP: 11120191
Next: 351215

Since: 03-19-13

Last post: 312 days
Last view: 23 days

oh my. it seems I broke your little toy.

you see, I found a slight and easy exploit letting you insert HTML into the custom thread icon field. while there are some limits in place to prevent this, they do not cover all possibilities and a workaround is easy.

at first I simply intended to have the thread icon be bigger than allowed, to see if this was possible.
as I experimented with it further, I decided to insert link tags in order to inject styles onto the page from an external CSS file.

to sum it up, within the 100 characters available you can insert any HTML and call external resources, so long as you have space. you cannot bypass the character limit.
while said character limit is preventing you from inserting lots, I am pretty sure you can stuff script up there, or link some if the restrictions break the script.

this prank is aimed towards Epele/Emuz so they may eventually fix this vulnerability.

granted, I also simply wanted to have fun. and I did! but whatever you do, please do not strip it before they get to see. thanks!


if need be, feel free to PM me for a clean report of my attempts, observations and results.


Epele
Posted on 04-28-18 11:18 AM Link | ID: 131369
Site Administrator
The Sorceress.
Boing~

Level: 226


Posts: 17530/20768
EXP: 175905967
Next: 328358

Since: 01-01-12
From: UK

Last post: 82 days
Last view: 17 hours
Noted, Gonna move this in the meantime.


The world could always use more heroes!

Danielle
Posted on 04-28-18 12:26 PM Link | ID: 131374
Normal User

Miracles Happen
When you believe...
Level: 235


Posts: 14125/23157
EXP: 201125564
Next: 800328

Since: 07-16-12
From: Albany, NY
OS: Windows 98

Last post: 10 hours
Last view: 8 hours
What did I say about taking too many Orange and black pills? 😂


"Miracles happen, when you believe..."
YouTube

Epele
Posted on 04-28-18 12:29 PM Link | ID: 131375
Site Administrator
The Sorceress.
Boing~

Level: 226


Posts: 17533/20768
EXP: 175905967
Next: 328358

Since: 01-01-12
From: UK

Last post: 82 days
Last view: 17 hours
What are the black pills?


The world could always use more heroes!

ゼンガー・ゾンボルト
Posted on 04-28-18 12:36 PM Link | ID: 131376
Normal User

Roy Koopa
My name is Sanger Zonvolt. I am the Sword that cleaves evil!
Level: 148


Posts: 5589/7703
EXP: 39723302
Next: 655361

Since: 01-04-12
From: Sweden

Last post: 15 days
Last view: 9 hours
What's with the fonts?

____________________
There is nothing that can stand against my Zankantou!

My youtube channel
FFRK Brotherhood

Epele
Posted on 04-28-18 12:42 PM Link | ID: 131377
Site Administrator
The Sorceress.
Boing~

Level: 226


Posts: 17534/20768
EXP: 175905967
Next: 328358

Since: 01-01-12
From: UK

Last post: 82 days
Last view: 17 hours
Hmm..

Maybe you don't just see it yet.


The world could always use more heroes!

Nicole
Posted on 04-28-18 12:49 PM Link | ID: 131378
Administrator
Goddess of the Apocalypse
Level: 191


Posts: 11270/13955
EXP: 96862180
Next: 1211913

Since: 01-03-12
From: Boston, MA

Last post: 1 day
Last view: 8 hours
♥11270 ✿3452 ★31
Everything looks fine to me, marking this as "no problem"


Thieppy
Posted on 04-28-18 12:58 PM Link | ID: 131381
Normal User

Level: 103


Posts: 2388/3450
EXP: 11120191
Next: 351215

Since: 03-19-13

Last post: 312 days
Last view: 23 days
yawn~

stare harder, Trapster~

stare harder, Trapster~

stare.. zzz




Danielle
Posted on 04-28-18 01:00 PM Link | ID: 131382
Normal User

Miracles Happen
When you believe...
Level: 235


Posts: 14126/23157
EXP: 201125564
Next: 800328

Since: 07-16-12
From: Albany, NY
OS: Windows 98

Last post: 10 hours
Last view: 8 hours
Orange and black... single capsule, not two separate tablets😉


"Miracles happen, when you believe..."
YouTube

ゼンガー・ゾンボルト
Posted on 04-28-18 01:30 PM Link | ID: 131386
Normal User

Roy Koopa
My name is Sanger Zonvolt. I am the Sword that cleaves evil!
Level: 148


Posts: 5590/7703
EXP: 39723302
Next: 655361

Since: 01-04-12
From: Sweden

Last post: 15 days
Last view: 9 hours
Posted by Thieppy
yawn~

stare harder, Trapster~

stare harder, Trapster~

stare.. zzz




Hmm. Nah. I only stare at cute girls. :P

____________________
There is nothing that can stand against my Zankantou!

My youtube channel
FFRK Brotherhood

Needle
Posted on 04-28-18 01:32 PM Link | ID: 131387
Normal User
Smile room...
Level: 71


Posts: 1702/1859
EXP: 3064457
Next: 102657

Since: 06-16-17

Last post: 44 days
Last view: 42 days
And now the latest post page is fucked up again.
Gee thanks.


Insert something witty here

Danielle
Posted on 04-28-18 09:14 PM Link | ID: 131402
Normal User

Miracles Happen
When you believe...
Level: 235


Posts: 14136/23157
EXP: 201125564
Next: 800328

Since: 07-16-12
From: Albany, NY
OS: Windows 98

Last post: 10 hours
Last view: 8 hours
Whosa crazy kitty? Cute sleepy kitty :-3


"Miracles happen, when you believe..."
YouTube

Epele
Posted on 04-29-18 12:44 AM Link | ID: 131409
Site Administrator
The Sorceress.
Boing~

Level: 226


Posts: 17537/20768
EXP: 175905967
Next: 328358

Since: 01-01-12
From: UK

Last post: 82 days
Last view: 17 hours
🐟
Wait for the fish.


The world could always use more heroes!

Thieppy
Posted on 04-29-18 12:51 AM Link | ID: 131410
Normal User

Level: 103


Posts: 2389/3450
EXP: 11120191
Next: 351215

Since: 03-19-13

Last post: 312 days
Last view: 23 days
and somehow,

Eppy posts that bigg fish right when I wake up and come back on.
suspicious!


Epele
Posted on 04-29-18 01:10 AM Link | ID: 131416
Site Administrator
The Sorceress.
Boing~

Level: 226


Posts: 17540/20768
EXP: 175905967
Next: 328358

Since: 01-01-12
From: UK

Last post: 82 days
Last view: 17 hours
And all the lights went out!


The world could always use more heroes!

Danielle
Posted on 04-29-18 01:13 AM Link | ID: 131419
Normal User

Miracles Happen
When you believe...
Level: 235


Posts: 14140/23157
EXP: 201125564
Next: 800328

Since: 07-16-12
From: Albany, NY
OS: Windows 98

Last post: 10 hours
Last view: 8 hours
Well that was fun while it lasted, heh :P Shouldn't the post icons be base64 too ;)


"Miracles happen, when you believe..."
YouTube

Epele
Posted on 04-29-18 01:20 AM Link | ID: 131421
Site Administrator
The Sorceress.
Boing~

Level: 226


Posts: 17542/20768
EXP: 175905967
Next: 328358

Since: 01-01-12
From: UK

Last post: 82 days
Last view: 17 hours
Out-smarted by the css fairy again.

Looks like I need to try again.


The world could always use more heroes!

Thieppy
Posted on 04-29-18 03:53 AM (rev. 3 of 04-29-18 04:17 PM by Thieppy) Link | ID: 131425
Normal User

Level: 103


Posts: 2392/3450
EXP: 11120191
Next: 351215

Since: 03-19-13

Last post: 312 days
Last view: 23 days
hehe~
regardless, the fix for the thread icon is good. outright bans quote marks and brackets.

it was fun to mess around with.


Edit: also whoops, I had Epele reduce the max icon width to 17px. the bunny won't show in fullsize.


Epele
Posted on 04-29-18 04:21 PM Link | ID: 131450
Site Administrator
The Sorceress.
Boing~

Level: 226


Posts: 17543/20768
EXP: 175905967
Next: 328358

Since: 01-01-12
From: UK

Last post: 82 days
Last view: 17 hours
Welp.

That's some insane css levels now.


The world could always use more heroes!

Kak
Posted on 04-29-18 04:33 PM Link | ID: 131451
Global Moderator

Bullet Bill
well then
Level: 124


Posts: 5369/5511
EXP: 21241000
Next: 595601

Since: 01-29-14
From: ???

Last post: 12 days
Last view: 6 days
Post #5369
I hope this reaches levels of Sonic CD which are never meant to be reached.

-----
Stats
Kak
Bullet Bill
aka Schezo
Level:124
Days:2695
Ranked:7
Links
???
Twitter
YouTube
Website
Pages: 1 2 3


Next newer thread | Next older thread
Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands


Acmlmboard v2.5.5 (10/04/2020)
© 2005-2021 Acmlm, Emuz, et al.

Page rendered in 0.129 seconds. (911KB of memory used)
MySQL - queries: 213, rows: 657/696, time: 0.084 seconds.