Attention!!™
SMB3 Hacking Forum Opened!
Information needed!
If you have any useful data on hacking SMB3, please post it in the this stickied thread in the new SMB3 Forum. We are also looking for someone to help run a SMB3 hacking Wiki.
Join the Kafuka Discord! (Click here)
Views: 5,568,514
Main | FAQ | IRC chat | Memberlist | Active users | Latest posts | Calendar | Stats | Ranks | Online users | Search
10-18-18 12:28 PM
Guest: Register | Login

0 users currently in Craziness Domain 二番: Kuchi Kopi's Bar | 1 guest

Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands
Next newer thread | Next older thread

Pages: 1 2 3

Thieppy
Posted on 04-28-18 10:40 AM (rev. 6 of 04-29-18 06:07 PM by Thieppy) Link | ID: 131365


gee, waffles!
Level: 93


Posts: 2385/3104
EXP: 7808081
Next: 244729

Since: 03-19-13
From:

Last post: 20 hours
Last view: 2 hours

oh my. it seems I broke your little toy.

you see, I found a slight and easy exploit letting you insert HTML into the custom thread icon field. while there are some limits in place to prevent this, they do not cover all possibilities and a workaround is easy.

at first I simply intended to have the thread icon be bigger than allowed, to see if this was possible.
as I experimented with it further, I decided to insert link tags in order to inject styles onto the page from an external CSS file.

to sum it up, within the 100 characters available you can insert any HTML and call external resources, so long as you have space. you cannot bypass the character limit.
while said character limit is preventing you from inserting lots, I am pretty sure you can stuff script up there, or link some if the restrictions break the script.

this prank is aimed towards Epele/Emuz so they may eventually fix this vulnerability.

granted, I also simply wanted to have fun. and I did! but whatever you do, please do not strip it before they get to see. thanks!


if need be, feel free to PM me for a clean report of my attempts, observations and results.

____________________
do you like clicking links?

Epele
Posted on 04-28-18 11:18 AM Link | ID: 131369
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17530/19234
EXP: 132883381
Next: 1321259

Since: 01-01-12
From: UK

Last post: 45 min.
Last view: 45 min.
Noted, Gonna move this in the meantime.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Danika
Posted on 04-28-18 12:26 PM Link | ID: 131374

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14125/17168
EXP: 107521039
Next: 1705498

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 36 min.
Last view: 36 min.
What did I say about taking too many Orange and black pills? 😂


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Epele
Posted on 04-28-18 12:29 PM Link | ID: 131375
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17533/19234
EXP: 132883381
Next: 1321259

Since: 01-01-12
From: UK

Last post: 45 min.
Last view: 45 min.
What are the black pills?


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

ゼンガー・ゾンボルト
Posted on 04-28-18 12:36 PM Link | ID: 131376

Giant Paratroopa
My name is Sanger Zonvolt. I am the Sword that cleaves evil!
Level: 130


Posts: 5589/6355
EXP: 25226345
Next: 504232

Since: 01-04-12
From: Sweden

Last post: 43 min.
Last view: 5 min.
What's with the fonts?

____________________
There is nothing that can stand against my Zankantou!

My youtube channel
FFRK Brotherhood

Epele
Posted on 04-28-18 12:42 PM Link | ID: 131377
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17534/19234
EXP: 132883381
Next: 1321259

Since: 01-01-12
From: UK

Last post: 45 min.
Last view: 45 min.
Hmm..

Maybe you don't just see it yet.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Nicolyn
Posted on 04-28-18 12:49 PM Link | ID: 131378
Administrator
Goddess of the Apocalypse
Level: 170


Posts: 11270/11867
EXP: 64372142
Next: 1014101

Since: 01-03-12
From: Boston, MA

Last post: 1 day
Last view: 13 hours
Everything looks fine to me, marking this as "no problem"


Nicole failure. Press left mouse button to continue.

Guru Meditation #0002479.11270

Thieppy
Posted on 04-28-18 12:58 PM Link | ID: 131381


gee, waffles!
Level: 93


Posts: 2388/3104
EXP: 7808081
Next: 244729

Since: 03-19-13
From:

Last post: 20 hours
Last view: 2 hours
yawn~

stare harder, Trapster~

stare harder, Trapster~

stare.. zzz



____________________
do you like clicking links?

Danika
Posted on 04-28-18 01:00 PM Link | ID: 131382

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14126/17168
EXP: 107521039
Next: 1705498

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 36 min.
Last view: 36 min.
Orange and black... single capsule, not two separate tablets😉


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

ゼンガー・ゾンボルト
Posted on 04-28-18 01:30 PM Link | ID: 131386

Giant Paratroopa
My name is Sanger Zonvolt. I am the Sword that cleaves evil!
Level: 130


Posts: 5590/6355
EXP: 25226345
Next: 504232

Since: 01-04-12
From: Sweden

Last post: 43 min.
Last view: 5 min.
Posted by Thieppy
yawn~

stare harder, Trapster~

stare harder, Trapster~

stare.. zzz




Hmm. Nah. I only stare at cute girls. :P

____________________
There is nothing that can stand against my Zankantou!

My youtube channel
FFRK Brotherhood

Needle
Posted on 04-28-18 01:32 PM Link | ID: 131387
cmoc when
Level: 60


Posts: 1702/1792
EXP: 1677332
Next: 95446

Since: 06-16-17

Last post: 40 days
Last view: 39 days
And now the latest post page is fucked up again.
Gee thanks.



Danika
Posted on 04-28-18 09:14 PM Link | ID: 131402

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14136/17168
EXP: 107521039
Next: 1705498

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 36 min.
Last view: 36 min.
Whosa crazy kitty? Cute sleepy kitty :-3


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Epele
Posted on 04-29-18 12:44 AM Link | ID: 131409
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17537/19234
EXP: 132883381
Next: 1321259

Since: 01-01-12
From: UK

Last post: 45 min.
Last view: 45 min.
🐟
Wait for the fish.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Thieppy
Posted on 04-29-18 12:51 AM Link | ID: 131410


gee, waffles!
Level: 93


Posts: 2389/3104
EXP: 7808081
Next: 244729

Since: 03-19-13
From:

Last post: 20 hours
Last view: 2 hours
and somehow,

Eppy posts that bigg fish right when I wake up and come back on.
suspicious!

____________________
do you like clicking links?

Epele
Posted on 04-29-18 01:10 AM Link | ID: 131416
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17540/19234
EXP: 132883381
Next: 1321259

Since: 01-01-12
From: UK

Last post: 45 min.
Last view: 45 min.
And all the lights went out!


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Danika
Posted on 04-29-18 01:13 AM Link | ID: 131419

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14140/17168
EXP: 107521040
Next: 1705497

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 36 min.
Last view: 36 min.
Well that was fun while it lasted, heh :P Shouldn't the post icons be base64 too ;)


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Epele
Posted on 04-29-18 01:20 AM Link | ID: 131421
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17542/19234
EXP: 132883381
Next: 1321259

Since: 01-01-12
From: UK

Last post: 45 min.
Last view: 45 min.
Out-smarted by the css fairy again.

Looks like I need to try again.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Thieppy
Posted on 04-29-18 03:53 AM (rev. 3 of 04-29-18 04:17 PM by Thieppy) Link | ID: 131425


gee, waffles!
Level: 93


Posts: 2392/3104
EXP: 7808081
Next: 244729

Since: 03-19-13
From:

Last post: 20 hours
Last view: 2 hours
hehe~
regardless, the fix for the thread icon is good. outright bans quote marks and brackets.

it was fun to mess around with.


Edit: also whoops, I had Epele reduce the max icon width to 17px. the bunny won't show in fullsize.

____________________
do you like clicking links?

Epele
Posted on 04-29-18 04:21 PM Link | ID: 131450
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17543/19234
EXP: 132883381
Next: 1321259

Since: 01-01-12
From: UK

Last post: 45 min.
Last view: 45 min.
Welp.

That's some insane css levels now.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Schezo
Posted on 04-29-18 04:33 PM Link | ID: 131451
Global Moderator

Buster Beetle
heh
Level: 115


Posts: 5369/5454
EXP: 16718168
Next: 93196

Since: 01-29-14
From: ???

Last post: 12 days
Last view: 3 days
Post #5369
I hope this reaches levels of Sonic CD which are never meant to be reached.

You may or may not be able to recognize where I stole this grid background from.
Stats
Kak
Buster Beetle
aka Schezo
Level:115
Days:1722
Ranked:6
Links
???
Twitter
YouTube
Website
Pages: 1 2 3


Next newer thread | Next older thread
Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands


Acmlmboard v2.5.4 (10/13/2018)
© 2005-2018 Acmlm, Emuz, et al.

Page rendered in 0.233 seconds. (657KB of memory used)
MySQL - queries: 213, rows: 631/670, time: 0.078 seconds.