Attention!!™
SMB3 Hacking Forum Opened!
Information needed!
If you have any useful data on hacking SMB3, please post it in the this stickied thread in the new SMB3 Forum. We are also looking for someone to help run a SMB3 hacking Wiki.
Join the Kafuka Discord! (Click here)
Views: 5,568,314
Main | FAQ | IRC chat | Memberlist | Active users | Latest posts | Calendar | Stats | Ranks | Online users | Search
10-18-18 11:39 AM
Guest: Register | Login

0 users currently in Craziness Domain 二番: Kuchi Kopi's Bar | 1 guest

Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands
Next newer thread | Next older thread

Pages: 1 2 3

Thieppy
Posted on 04-28-18 10:40 AM (rev. 6 of 04-29-18 06:07 PM by Thieppy) Link | ID: 131365


gee, waffles!
Level: 93


Posts: 2385/3104
EXP: 7808016
Next: 244794

Since: 03-19-13
From:

Last post: 19 hours
Last view: 1 hour

oh my. it seems I broke your little toy.

you see, I found a slight and easy exploit letting you insert HTML into the custom thread icon field. while there are some limits in place to prevent this, they do not cover all possibilities and a workaround is easy.

at first I simply intended to have the thread icon be bigger than allowed, to see if this was possible.
as I experimented with it further, I decided to insert link tags in order to inject styles onto the page from an external CSS file.

to sum it up, within the 100 characters available you can insert any HTML and call external resources, so long as you have space. you cannot bypass the character limit.
while said character limit is preventing you from inserting lots, I am pretty sure you can stuff script up there, or link some if the restrictions break the script.

this prank is aimed towards Epele/Emuz so they may eventually fix this vulnerability.

granted, I also simply wanted to have fun. and I did! but whatever you do, please do not strip it before they get to see. thanks!


if need be, feel free to PM me for a clean report of my attempts, observations and results.

____________________
do you like clicking links?

Epele
Posted on 04-28-18 11:18 AM Link | ID: 131369
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17530/19233
EXP: 132872118
Next: 1332522

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 1 min.
Noted, Gonna move this in the meantime.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Danika
Posted on 04-28-18 12:26 PM Link | ID: 131374

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14125/17164
EXP: 107482673
Next: 1743864

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 13 hours
Last view: 13 hours
What did I say about taking too many Orange and black pills? 😂


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Epele
Posted on 04-28-18 12:29 PM Link | ID: 131375
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17533/19233
EXP: 132872118
Next: 1332522

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 1 min.
What are the black pills?


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

ゼンガー・ゾンボルト
Posted on 04-28-18 12:36 PM Link | ID: 131376

Giant Paratroopa
My name is Sanger Zonvolt. I am the Sword that cleaves evil!
Level: 130


Posts: 5589/6354
EXP: 25220220
Next: 510357

Since: 01-04-12
From: Sweden

Last post: 1 day
Last view: 14 min.
What's with the fonts?

____________________
There is nothing that can stand against my Zankantou!

My youtube channel
FFRK Brotherhood

Epele
Posted on 04-28-18 12:42 PM Link | ID: 131377
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17534/19233
EXP: 132872118
Next: 1332522

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 1 min.
Hmm..

Maybe you don't just see it yet.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Nicolyn
Posted on 04-28-18 12:49 PM Link | ID: 131378
Administrator
Goddess of the Apocalypse
Level: 170


Posts: 11270/11867
EXP: 64371706
Next: 1014537

Since: 01-03-12
From: Boston, MA

Last post: 1 day
Last view: 12 hours
Everything looks fine to me, marking this as "no problem"


Nicole failure. Press left mouse button to continue.

Guru Meditation #0002479.11270

Thieppy
Posted on 04-28-18 12:58 PM Link | ID: 131381


gee, waffles!
Level: 93


Posts: 2388/3104
EXP: 7808016
Next: 244794

Since: 03-19-13
From:

Last post: 19 hours
Last view: 1 hour
yawn~

stare harder, Trapster~

stare harder, Trapster~

stare.. zzz



____________________
do you like clicking links?

Danika
Posted on 04-28-18 01:00 PM Link | ID: 131382

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14126/17164
EXP: 107482673
Next: 1743864

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 13 hours
Last view: 13 hours
Orange and black... single capsule, not two separate tablets😉


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

ゼンガー・ゾンボルト
Posted on 04-28-18 01:30 PM Link | ID: 131386

Giant Paratroopa
My name is Sanger Zonvolt. I am the Sword that cleaves evil!
Level: 130


Posts: 5590/6354
EXP: 25220220
Next: 510357

Since: 01-04-12
From: Sweden

Last post: 1 day
Last view: 14 min.
Posted by Thieppy
yawn~

stare harder, Trapster~

stare harder, Trapster~

stare.. zzz




Hmm. Nah. I only stare at cute girls. :P

____________________
There is nothing that can stand against my Zankantou!

My youtube channel
FFRK Brotherhood

Needle
Posted on 04-28-18 01:32 PM Link | ID: 131387
cmoc when
Level: 60


Posts: 1702/1792
EXP: 1677275
Next: 95503

Since: 06-16-17

Last post: 40 days
Last view: 39 days
And now the latest post page is fucked up again.
Gee thanks.



Danika
Posted on 04-28-18 09:14 PM Link | ID: 131402

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14136/17164
EXP: 107482673
Next: 1743864

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 13 hours
Last view: 13 hours
Whosa crazy kitty? Cute sleepy kitty :-3


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Epele
Posted on 04-29-18 12:44 AM Link | ID: 131409
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17537/19233
EXP: 132872118
Next: 1332522

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 1 min.
🐟
Wait for the fish.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Thieppy
Posted on 04-29-18 12:51 AM Link | ID: 131410


gee, waffles!
Level: 93


Posts: 2389/3104
EXP: 7808016
Next: 244794

Since: 03-19-13
From:

Last post: 19 hours
Last view: 1 hour
and somehow,

Eppy posts that bigg fish right when I wake up and come back on.
suspicious!

____________________
do you like clicking links?

Epele
Posted on 04-29-18 01:10 AM Link | ID: 131416
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17540/19233
EXP: 132872118
Next: 1332522

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 1 min.
And all the lights went out!


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Danika
Posted on 04-29-18 01:13 AM Link | ID: 131419

Crazy Catgirl
Meow meow meow meow...
Level: 197


Posts: 14140/17164
EXP: 107482673
Next: 1743864

Since: 07-16-12
From: Albany, NY
OS: Mac OS X/Windows 10

Last post: 13 hours
Last view: 13 hours
Well that was fun while it lasted, heh :P Shouldn't the post icons be base64 too ;)


"Help control the population—always spay and neuter your pets!"
YouTubeTwitterTumblr

Epele
Posted on 04-29-18 01:20 AM Link | ID: 131421
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17542/19233
EXP: 132872118
Next: 1332522

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 1 min.
Out-smarted by the css fairy again.

Looks like I need to try again.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Thieppy
Posted on 04-29-18 03:53 AM (rev. 3 of 04-29-18 04:17 PM by Thieppy) Link | ID: 131425


gee, waffles!
Level: 93


Posts: 2392/3104
EXP: 7808016
Next: 244794

Since: 03-19-13
From:

Last post: 19 hours
Last view: 1 hour
hehe~
regardless, the fix for the thread icon is good. outright bans quote marks and brackets.

it was fun to mess around with.


Edit: also whoops, I had Epele reduce the max icon width to 17px. the bunny won't show in fullsize.

____________________
do you like clicking links?

Epele
Posted on 04-29-18 04:21 PM Link | ID: 131450
Administrator
The Sorceress.
My servants never die!

Level: 209


Posts: 17543/19233
EXP: 132872118
Next: 1332522

Since: 01-01-12
From: UK

Last post: 1 day
Last view: 1 min.
Welp.

That's some insane css levels now.


<Nicolyn> Thierry doesn't sleep
<Nicolyn> she is powered solely by those little floating hearts

Schezo
Posted on 04-29-18 04:33 PM Link | ID: 131451
Global Moderator

Buster Beetle
heh
Level: 115


Posts: 5369/5454
EXP: 16718005
Next: 93359

Since: 01-29-14
From: ???

Last post: 12 days
Last view: 3 days
Post #5369
I hope this reaches levels of Sonic CD which are never meant to be reached.

You may or may not be able to recognize where I stole this grid background from.
Stats
Kak
Buster Beetle
aka Schezo
Level:115
Days:1722
Ranked:6
Links
???
Twitter
YouTube
Website
Pages: 1 2 3


Next newer thread | Next older thread
Main - Craziness Domain 二番: Kuchi Kopi's Bar - Bow down before me, For I am taking over thee lands


Acmlmboard v2.5.4 (10/13/2018)
© 2005-2018 Acmlm, Emuz, et al.

Page rendered in 0.378 seconds. (657KB of memory used)
MySQL - queries: 213, rows: 631/670, time: 0.196 seconds.