â„–16781501[Last 50 Posts][1][2][3][4][Quote]
You VILL raid
https://www.kamtape.com/we hit the bumo limit on the 1st thread
<What is it?KamTape is a site that attempts to recreate the look, feel, and style of mid 2000s youtube. However like with most niche internet content its already infested with trannies.
<What do I do?Because the site is pretty new and has a small userbase. It should be easy to slow-burn with gemmy content.
<Why should I care?BECAUSE I DO OKAY!
FIRST THREAD 'CHIVE:
https://megalodon.jp/2026-0722-0515-18/https://soyjak.st:443/soy/thread/16779388.html â„–16781505[Quote]
No
â„–16781508[Quote]
second
â„–16781510[Quote]
>No
Yes
â„–16781512[Quote]
thraw
â„–16781513[Quote]
Fourth
â„–16781514[Quote]
release the gubbies
â„–16781516[Quote]
yes
â„–16781517[Quote]
>>16781501 (OP)leave those innocent transgenders alone bigot
â„–16781518[Quote]
release the skiddies
â„–16781520[Quote]
release the chuddies
â„–16781523[Quote]
>>>16781501
>leave those innocent transgenders alone bigot
geg
â„–16781527[Quote]
>>16781517xhey are larping as 'teens
â„–16781528[Quote]
XHEY HAVE A 2ND CORD CALLED YOUTUBE RESEARCH
SCROLL UP IN ANNOUNCEMENTS
â„–16781531[Quote]
0 mercy
â„–16781533[Quote]
RELEASE THE SKIBBIDIES!!!!!
â„–16781534[Quote]
>>16781527rape those retarded trannys to death
â„–16781536[Quote]
quote leak their ips now kek
â„–16781537[Quote]
all of us are bleached btw
â„–16781539[Quote]
release the jerdees
â„–16781541[Quote]
>>16781538HOLY SHIT I ALMOST FORGOT ABOUT IT GEEEEG
â„–16781542[Quote]
>This user account is suspended
'Teen who spammed the strange sperg tranny's 'ox in the comments here, my account got nished instantly geg
â„–16781543[Quote]
>>16781538im calling soyjak right now just wait
â„–16781547[Quote]
TTD thread
â„–16781548[Quote]
>>16781538the hacker group known as soyjak
â„–16781555[Quote]
>>16781538>soyboy woahjack doesn't scare meGEEEEEEEEEG
â„–16781556[Quote]
KEK WTF HOW DID U BREACH THEIR
>>16781552 GEEEEEEEEEEEEEEEEEEEEEEEEEEEEG
â„–16781558[Quote]
>>16781553Not exactly porn, but porn-slop
â„–16781563[Quote]
>>16781556db
>>16781558Sir its called EPI / softcore porn
â„–16781565[Quote]
>>16781556some admins are in out side
â„–16781566[Quote]
>>16781556they kept all of their usernames and emails in one txt file it seems
â„–16781567[Quote]
>>16781556some of the admins are on our side
â„–16781569[Quote]
is the kansas 'teen from teh first thread here? he said the jashonn (fuki) troon is from sunnyside, ny and i want snopes
â„–16781575[Quote]
>>16781569it was from a email lookup on fingerprint.to with a location on it
â„–16781576[Quote]
are we gonna make an soyjak wiki article about kamtape?
â„–16781578[Quote]
>>16781562its not that yubi
i know a lot of the names mentioned by valerie and copy
â„–16781580[Quote]
do you think we can now gem up xheir comment sections, i mean we have their socials and email
â„–16781581[Quote]
$2b$12$M4FDS8wO3YgtEN/J3nkaDu/wo1ApMtDGc9gKvJ5JKEB5JvfqKDm.W
wat typa hash is this?
â„–16781582[Quote]
>>16781577there's no way this nigga is 25, he looks 17 or some shi
â„–16781584[Quote]
can we get valerie to record an apology video
â„–16781585[Quote]
>>16781581check the code on github and see
â„–16781587[Quote]
>>16781581cant be dehashed i already checked
â„–16781590[Quote]
>>16781577anyone with a unverified paypal account with fake credentials, can u send him an invoice to 'ox him
â„–16781592[Quote]
>>16781587wat does it have a salt
â„–16781595[Quote]
>>16781593this guy is also a troon who makes jewtube sites
â„–16781596[Quote]
>>16781575ok because theres a possible relative (mother presumably) with the last name reese that lives there. jashonn reese wasnt in any public info sites, the only thing i could find was some snca youtube animation xe made 5 years ago
â„–16781597[Quote]
the passwords are bcrypt password hash soo it cannot be dehashed
â„–16781604[Quote]
>>16781597you have to bruteforce by hashing text and comparing them against the password hashes
â„–16781623[Quote]
>>16781593grand dad wabag, raid NOW
â„–16781624[Quote]
>>16781619yeah. i tried going onto
kamtape.com/admin/become_kt.php
and i got redirected to index.php
â„–16781626[Quote]
>>16781619yes but its slightly old doe
according to one of the admins helping us out
â„–16781634[Quote]
>>16781626>one of the admins helping us outMarge
â„–16781639[Quote]
>>16781634we have some admins helping us out
and some former friends of the owners
this is partly fueled by a personal vendetta against them geg
â„–16781642[Quote]
rape all websites managed by incompetent shitters on discord servers
â„–16781643[Quote]
>>16781635nigger why did it cut off
â„–16781647[Quote]
>>16781633no sql injection is possible
â„–16781652[Quote]
>>16781647we have to bruteforce passwords and find matching hashes
â„–16781654[Quote]
>>16781652what is the hash again?
â„–16781655[Quote]
>>16781654"$2b$12$M4FDS8wO3YgtEN/J3nkaDu/wo1ApMtDGc9gKvJ5JKEB5JvfqKDm.W"
this string
â„–16781661[Quote]
>>16781656don't forget the mormons
â„–16781663[Quote]
>>16781661and the qurans with scientology
â„–16781667[Quote]
i just found a list of these troontube sites we can raid
â„–16781672[Quote]
>>16781538glad you guys remembered
â„–16781674[Quote]
>>16781672fear mongering btw
â„–16781675[Quote]
>>16781667i was searching for kamtape on google and found this geg
http://yt.revival-list.com/list.php â„–16781676[Quote]
>>16781670xhe said xhe would ack after all
>xhe took the long way down and possessed your krita â„–16781678[Quote]
>>16781670oh nononononono there's so much embedded traiso doctorsss
â„–16781679[Quote]
>>16781676*insert sad nigger gif*
â„–16781683[Quote]
>>16781675slowest site ever award
â„–16781684[Quote]
>>16781679what is this nigger app
â„–16781686[Quote]
>>16781656jooooooooons anporve this
â„–16781690[Quote]
sorry CHUD! Your MEDIA is pending APPROVAL!
â„–16781691[Quote]
>>16781683geg
troons just cant code good
â„–16781697[Quote]
>>16781670right click and click forget
â„–16781702[Quote]
>>16781644isn't that a 'teen?
â„–16781705[Quote]
>>16781619why is everything so messy
learn how to organize things with folders kamtapeniggers
â„–16781706[Quote]
>>16781644it is reportable
â„–16781708[Quote]
>>16781702thats copy on an alt because i got xim limited
â„–16781709[Quote]
>>16781698That's from previous raid
â„–16781712[Quote]
PRIVATE MESSAGES CAN BE SEEN BY OTHERS GEG
â„–16781713[Quote]
they stopped lurking also
theyre talking about random snca now
â„–16781716[Quote]
>>16781712geg show us how
i want to scrape them all
â„–16781719[Quote]
>>16781716if ($msg['receiver'] != $session['uid']) {
header("Location: my_messages.php");
}
There's no exit()/die() after the redirect header. Since output buffering (ob_start()) is on and never cleaned here, the full page — including the private message subject and body via decrypt() — still gets generated and sent in the response body. A browser will navigate away, but anything that doesn't follow redirects (curl, Burp, a script, or even the browser Network tab) sees the private message content regardless. Any logged-in user can read any other user's private inbox/outbox messages just by changing the id parameter — read_msg.php?id=<any pmid>.
â„–16781725[Quote]
>>16781644what we should report it for?
â„–16781730[Quote]
got fuki limited again
>>16781725every category that is even remotely related
â„–16781739[Quote]
>>16781719can someone register (with a vpn) and test this
â„–16781742[Quote]
what have we done besides dox valerie so far?
â„–16781744[Quote]
YOU CAN RESET EVERYONE PASSWORD WITHOUT A EMAIL OR ANYTHING AND GET THEM LOGGED OUT
â„–16781747[Quote]
>>16781739i have a account right i can test
â„–16781748[Quote]
>>16781744GEG TELL US HOW
>>16781742partial 'ox of the 2 owners and getting them limited
â„–16781749[Quote]
>>16781744ok now you are just bullshitting
â„–16781758[Quote]
Step 1 — Attacker submits just a username, nothing else:
php
if($_SERVER["REQUEST_METHOD"] == "POST" && isset($_POST['field_login_username']) && !empty($_POST['field_login_username'])) {
$real_user = $conn->prepare("SELECT * FROM users WHERE users.username = ?");
$real_user->execute([$_POST['field_login_username']]);
No password, no email confirmation, no CSRF token, no CAPTCHA (contact.php has a 3-hour cooldown check — this endpoint has nothing like that).
Step 2 — If the username exists, the site immediately generates and installs a brand-new password, before the real owner has done anything or confirmed anything:
php
$new_password = generateStrongPassword(rand(12, 28));
…
$bcrypt_new = password_hash($new_password, PASSWORD_DEFAULT);
$reset_pass = $conn->prepare("UPDATE users SET old_pass = ? WHERE uid = ?");
$reset_pass->execute([$real_user['password'], $real_user['uid']]); // old password saved as fallback
$reset_pass = $conn->prepare("UPDATE users SET password = ? WHERE uid = ?");
$reset_pass->execute([$bcrypt_new, $real_user['uid']]); // password changed NOW
At this exact moment — before any email has even been sent — the real account owner's password no longer works. (Their old password is kept in old_pass, and login.php does accept old_pass as a fallback once, but that's an unrelated grace-period mechanism for the site's own past migrations, not something the victim knows to use — they just see "your login is incorrect" the next time they try to log in.)
Step 3 — The new password is emailed in plaintext:
php
$mail->Body = '…Here is your user name and login password:<br>User: '.$real_user['username'].'<br>Password: '.$new_password.'…';
Step 4 — The response itself tells the attacker whether the username exists:
php
if($real_user->rowCount() == 0) {
$bad_shit = "That user does not exist.";
}
…
alert("Successfully sent your password! Check your inbox.");
â„–16781760[Quote]
i know we have valeries house, but whats the written address? it leads to a small group of houses, but not an exact addy
â„–16781782[Quote]
>>16781778report is xitter btw
â„–16781783[Quote]
>>16781778w-what if… Fuki is on our side… *Gulp*
â„–16781787[Quote]
>>16781778fuki is a *gulp* hecking racist???
â„–16781789[Quote]
>>16781783Xe literally use soyspeak all the time. Check replie in his xitter account
https://x.com/fuki_1998 â„–16781792[Quote]
>>16781778xe will NEVER be shardee kulchur….
â„–16781794[Quote]
wait i just checked are xhey a groyper or is it larp
â„–16781795[Quote]
>>16781783>cordniggers are soyteens because they say doebeit nowjsid
â„–16781796[Quote]
>>16781792Proud sharty transqueen doebeit
â„–16781799[Quote]
>>16781778someone post this in the cord
lets turn the troon userbase against him geeeeg
â„–16781804[Quote]
>>16781799Considiring that his Twitter are literally linked in his discord profile. They already know it and think that that's completely okay geg
â„–16781805[Quote]
>>16781778You guys can NOT be this stupid
â„–16781813[Quote]
>>16781799just drop their xitter, there's so much racist stuff that it'll cause massive leakege
â„–16781815[Quote]
so, operation gemtape was winraid
â„–16781817[Quote]
>>16781804i doubt everyone knows
some sloptuber shouted out the site and it got a lot of members
â„–16781818[Quote]
>>16781805we're vantablack A10 aryan
â„–16781820[Quote]
>>16781815Neutral raid doebeit
We didn't do much but we have fun
â„–16781826[Quote]
>so, operation gemtape was winraid
Wanna go harass the monkey site?
â„–16781829[Quote]
>>16781820>Neutral raid doebeitwe got access to the site data base and 'ox some fags that a winraid
â„–16781830[Quote]
we still have more gemming to do or something
â„–16781832[Quote]
>>16781829Geg i forgot we did that, issa winraid
â„–16781837[Quote]
vmos im going to kill you with a machete if you freeze one more time
â„–16781838[Quote]
>>16781830tsmt
we havent bruteforced any hashes or exploited the site
â„–16781839[Quote]
sooo how are we gonna call this raid? just KamTape raid?
â„–16781842[Quote]
im currently testing the reset password stuff soo i can make a python script that reset everyone password
â„–16781843[Quote]
>>16781839there's already a name. Operation GemTape or something
â„–16781844[Quote]
>>16781839read the name of the thread nigger
â„–16781845[Quote]
>>16781844im too lazy saar
â„–16781846[Quote]
>>16781838tsmt, we havent even done the main task yet
â„–16781850[Quote]
sheet I missed out
â„–16781852[Quote]
>>16781842can you make a script where you enter in text, it hashes with bcrypt, and then tells you every user with that password
â„–16781853[Quote]
We did something, that means we are on it. We shall NOT give up.
â„–16781854[Quote]
>>16781852or where you can use a list of passwords like rockyou.txt
â„–16781855[Quote]
if we have the source code couldn't we create a splinter called like SoyTape?
â„–16781859[Quote]
>>16781855soytube, geg.
but their source code is so shit we probably shouldn't do it
â„–16781860[Quote]
>>16781855source code is poisoned tranny rubbish anyways, every 'teen is going to get raped
â„–16781867[Quote]
they're too lazy to create folder
â„–16781869[Quote]
look like the password stuff was fixed
â„–16781872[Quote]
>>16781820we still have plenty of time to do more, we got half these niggas 'oxxed alredy, too bad i'm too lazy to do anything with their info
â„–16781873[Quote]
>>16781869what about message stuff
also we can spam their emails too
and bruteforce passwords
â„–16781874[Quote]
Did anybaldi look into the source code for vulnerabilities?
â„–16781875[Quote]
>>16781873we can 'ape the emails but the passwords cant be cracked
â„–16781877[Quote]
>>16781873let me try that
â„–16781878[Quote]
>>16781874yeah some nigga put it into claude but it apparently just spit back raisin
â„–16781879[Quote]
anyways did we find any exploit that would steal someone's ktsession cookie
â„–16781880[Quote]
>>16781875but just spamming coinslots is boring
â„–16781883[Quote]
>>16781875not cracked but compared
we can hash our own text and see if it matches anyone's password
â„–16781887[Quote]
>>16781868Kuro is a fat nigger or something, i hate him for having jjk tranime pfp
â„–16781889[Quote]
all i did was post that one mulletjak CIA video and i got nished
â„–16781890[Quote]
>>16781883wait if we have the src dont we have the salt then?
â„–16781891[Quote]
the source is kinda old soo some vuln could be fixed already
â„–16781892[Quote]
>>16781890do they even salt the hashes
â„–16781900[Quote]
Mario and luigi
â„–16781901[Quote]
>>16781883you know where i can find a list of passwords soo i can make the python script
â„–16781903[Quote]
>>16781886Las medias son approvals
â„–16781904[Quote]
>>16781901use rockyou.txt o algo
â„–16781906[Quote]
someone on der 'cord asked the owners to add <glow text="cloudflare captchas"><\glow>
â„–16781908[Quote]
>>16781892i found this
$param_password = password_hash($password, PASSWORD_DEFAULT);
in signup.php, i should look for PASSWORD_DEFAULT somewhere
â„–16781912[Quote]
>>16781886midi bending anportal
â„–16781917[Quote]
>>16781908geg this means they dont salt it
run this code on any text you want and you have the hash of that word
â„–16781919[Quote]
>>16781906NUSOI…they are already using cloudflare to datamine
â„–16781920[Quote]
retarded joons too busy gooning to actually approve anything
â„–16781922[Quote]
>>16781913i have it saved don't worry
â„–16781925[Quote]
>>16781917no fucking way they're that stupid
geg
â„–16781930[Quote]
>>16781917soo i can run this with rockyou.txt and we good ?
â„–16781941[Quote]
>>16781930yes geg
have a script hash every password in rockyou and compare it against kamtape
if any match, have it give you the username, email, and password
â„–16781944[Quote]
>>16781941Something extremely gemmy is about to happen
â„–16781953[Quote]
>>16781941surely there is a precomputed database of hashes for rockyou and other lists so we can instantly lookup passwords using a hashtab
btw try checking shit like this on breach.vip and snusbase
â„–16781955[Quote]
>>16781944this thread WILL save the party
â„–16781958[Quote]
>>16781944share the script here when its done so we can claim some accounts geg
â„–16781959[Quote]
good luck all of you smart lads, i know you will get everything you want to get! Im gonna go play some bullshit and sleep. Love all of you niggers
â„–16781962[Quote]
@quote prepare to sticky and chive this thread
â„–16781963[Quote]
'up
â„–16781964[Quote]
>>16781953php password_default hashes?
â„–16781967[Quote]
i think faggie found the thread
â„–16781970[Quote]
>>16781967xe was on the other thread
â„–16781971[Quote]
>>16781964no i mean go find a precomputed hashlist for shit whatever algorithm this uses and put them into a hashtable, then scan the hashtable for your targets
â„–16781974[Quote]
>>16781971it uses php's password_default
â„–16781976[Quote]
>>16781973You can probably report that to get xhis account limited
â„–16781977[Quote]
>>16781973>troon saying kysthe projection is real
â„–16781978[Quote]
>>16781973report xim so xe gets raped
â„–16781980[Quote]
>>16781974is there something wrong with using password_default im a php noob
â„–16781986[Quote]
>>16781978tsmt
everyone do this fast
as long as you get atleast 1 report before he deletes it will go through
â„–16781992[Quote]
i found proof that Maggie owns 'p
â„–16781994[Quote]
>>16781992OYYYYYYYYYYYYYY
â„–16781995[Quote]
>i found proof that Maggie owns 'p
OYYYYYYYYYYYYYYYYY
â„–16781998[Quote]
hey faggie
tell copy and fuki that cleber and nugg3t and the others own them now geg
â„–16781999[Quote]
GEM
â„–16782001[Quote]
Gemmy
â„–16782002[Quote]
test
â„–16782005[Quote]
we are 'aping and killing fuki's community and xhey are reposting bwc 'orn on their x
â„–16782007[Quote]
>>16781984why do you keep self-inserting as siegfried muller
â„–16782008[Quote]
>>16781974what algorithm is it specifically for this though also what is the current password_default algorithm and in what format/base are the hashes stored
i don't know anything about php because it is a dnb
if you provide me with the details to do everything i need i'll make a script to 'mine the plaintext passwords from whatever list
need this NQW so i can help you all fastburn it
â„–16782009[Quote]
>>16782005bleachpilled and bwcmaxxing
â„–16782012[Quote]
Whats Maggies discord id I could potentially dox them through it
â„–16782014[Quote]
>>167820121425507321240490077
â„–16782015[Quote]
>>16782008it might be documented on the php website
>1425507321240490077
â„–16782018[Quote]
>>16781998hey faggie you didnt do this yet
â„–16782020[Quote]
>>16782008b crypt im pretty sure
â„–16782022[Quote]
Loaded 4035 entries from kamtape.txt
Processed 0 valid entries
Created hash table with 0 entries
Processing complete. Found 0 matches. Results saved to result.txt
â„–16782024[Quote]
>>16782019GEEG whats the address?
â„–16782028[Quote]
>>16782022are you parsing it right
â„–16782030[Quote]
>>16782020claude says the shit in the db is bcrypt
i'll make the most swagged out as fuck multithreaded python script after i get back since i'm going somewhere
>>16782028it's csv it's not that hard to parse
â„–16782032[Quote]
what hashing algorithm is used in the leaks?
â„–16782035[Quote]
>>16782024'za sent to the tranny we 'oxxed before
Apt 1 at 1560 13th St, Courtenay, British Columbia, Canada V9N6C1
â„–16782036[Quote]
>>16781992OY WHAT THE FUCK
â„–16782037[Quote]
>>16782032php's password_default
the database itself is a csv
â„–16782046[Quote]
>>16782019retro ahh 'za skin blud 💀
>>16782030password_default uses the current best algo for hashing passwords so it can change any time
â„–16782049[Quote]
faggie probably uses 4cuck's /lgbt/
â„–16782052[Quote]
>>16782046lets try bcrypt
â„–16782056[Quote]
>>16782052Nusoi it is bcrypt why did'nt you try it
â„–16782062[Quote]
Test
â„–16782076[Quote]
get a bcrypt hashed version of rockyou.txt, and match it up to the kamtape leak
â„–16782079[Quote]
>>16781755where is idksterling
â„–16782086[Quote]
>>16782079>idksterlingerm, thats Johnathon.
â„–16782101[Quote]
>>16782094>faggotism wallpaperGEG
â„–16782102[Quote]
>>16782094get xer email from der 'tube
â„–16782105[Quote]
can anyone give a rundown on what's going on and what to do
â„–16782112[Quote]
hey faggie
tell "valerie" that dicklong is coming for him
nugg3t, cleber, and more are on the way!
â„–16782115[Quote]
>>16782094the Indian strikes again
â„–16782119[Quote]
>>16782094the jokes write themselves gegggg
â„–16782129[Quote]
>>16782102Retarded question but how? I didn't see an attached email in the about me section
â„–16782140[Quote]
>>16782129cant we get it if we have his google id?
â„–16782148[Quote]
>>16782131im gonna spam deal dough videos on the site
â„–16782154[Quote]
>>16782140Most I know about google ids is that they're what you use to look at somephono's google reviews. Not sure how you get a google id from a youtube channel
â„–16782159[Quote]
>>16782158rape and kill these niggers
â„–16782160[Quote]
>>>16782094
>>THIS MACHINE KILLS commies
â„–16782163[Quote]
>>16782158deleted namerole award
â„–16782165[Quote]
>>16781953What happened to tbis
â„–16782168[Quote]
Loaded 4035 valid entries from kamtape.txt
its looking btw !
â„–16782183[Quote]
>>16782168if it fails again lets try a bigger list of passwords
rockyou is mostly common ones
â„–16782188[Quote]
gonna take sometime btw because bcrypt is slow like a nigger
â„–16782191[Quote]
>>16782183find one in the mean time im gonna shit
â„–16782196[Quote]
faggie left the server after i included the name matthew in my post geeeeg
i was just guessing but i got it right
â„–16782198[Quote]
should i impersonate faggie, go into random 'cords and act retarded
â„–16782205[Quote]
>>16782200>CutFmboydoctors