№17257954[Quote]
>>17257939It was a gemmy raid
№17258712[Quote]
up
№17259443[Quote]
>>17257647the xss is not an issue. it is escaped correctly.
This was not AI coded, this was made by hand, by me, and i have run mutliple pen tests against it
№17259465[Quote]
>>17259443>not ai codedwhy does the design look like that then faggot
№17259523[Quote]
>>>17259443>>not ai coded>why does the design look like that then faggotIt's a SOLID design with a controller -> service -> repo -> DAO design.
Uses go Fiber for controllers.
the designs are all drawn in Miro if you care to look at them
https://miro.com/app/board/uXjVGrJQlmo=/?share_link_id=66483424667I am happy to talk in depth on how the system is designed
№17259551[Quote]
I do however have an open bounty and am willing to give anyone £1000 for anyone who can break into the site.
№17259591[Quote]
>>17259551do you accept BTC? i could try tommorrow but it's probably impossible since i have only had experience with php hijacking
№17259594[Quote]
>>>17257483
>claude said it was better than average and it wasn't willing to look through the whole thing but it pointed out this idk if its useful
>
>1. One inconsistent XSS gap. Every other place that injects HTML via dangerouslySetInnerHTML runs it through DOMPurify first — except TruthCard.tsx, which renders quote.textHtml/quote.textJpHtml straight from the external Umineko Quote Finder API with no sanitization. That API is presumably trusted, but if it's ever compromised, has a bug, or someone points your instance at a different quote source later, that's a direct stored-XSS path. Cheap fix: wrap it in DOMPurify.sanitize() like the rest of the codebase does.
>
>2. Deployment checklist item, not a code bug. livekit.yaml.example / ingress.yaml.example ship with devkey / devsecret_change_me_to_a_long_random_value. The files clearly say "CHANGE THIS," but this is the single most common way self-hosted LiveKit setups get compromised in practice — people copy the example and forget. If you're enabling voice chat / watch parties / live streaming, double-check your real livekit.yaml and ingress.yaml (not the .example files) have unique, random keys.
As for 2 this is correct, on prod this key is changed with a secure key, but anyone who wants to deploy this for themsvles should change this value
№17259609[Quote]
also everyone in this thread is gone because we are all raiding some shitty art posting sites at
>>17257836 (OP) №17259638[Quote]
>>17259591>do you accept BTC? i could try tommorrow but it's probably impossible since i have only had experience with php hijackingyes. if you break in, i will send you £1000 in BTC.
I worked hard designing this system, and have been a software dev for over 13 years and work as a software architect for a cyber security company in London.
I have had many attacks against the service and none of them have worked so far. but if you get in, i will send you the money
№17259682[Quote]
>>17259638DM me on Twitter:
https://x.com/VictoriqueM with how you did it and the exploit you find and i will honestly send you the cash
№17259757[Quote]
>>17259594Quote Finder API is something i also created and trust it.
https://quotes.auaurora.moe/It uses a AST lexer to parse all the Umineko game data into an AST. so i am sorry, there is no raiding that site :(
№17259813[Quote]
Instead of using AI to try break my site,. why not use your brains… if any of you actually have some lmao. anyway, this has been fun! i look forward to it again
№17259871[Quote]
>>17259813it's the sharty everyone here is braindead unless you go on /tech/
№17259910[Quote]
>>>17259813 (You)
>it's the sharty everyone here is braindead unless you go on /tech/
Judging by the fact that everyone is trying to use AI for something they could not understand in 20 years. I can see that
№17260006[Quote]
This was the fucking worst attempt of a raid i had ever seen. you people should be ashamed of yourselves.
you need to pick SHIT software to raid. not good software. and only 17 accounts? you fucking cunts are pathetic
№17260039[Quote]
>>17260006Hi Nusoi it's your first time posting!
№17260043[Quote]
>>17260006>wordswordswordsgo back to your xitter circlejerk
№17260076[Quote]
>>17260053>image instantly approvedhi oldsoi
№17260096[Quote]
Shittest "raid" ever seen. but this entire thread is embarrassing. using "claude" to try and find backdoors in a cyber security's software is fucking funny. you people have no idea what you are doing.
try harder next time,
№17260123[Quote]
>>17260096god there are a lot of fucking nusois here
did someone link this thread on the website?
№17260124[Quote]
filtered and keep leaking on me
№17260136[Quote]
>>17260096>cyber security's software??????????????????????
№17260171[Quote]
>>>17259910
>Oh btw, I hope that’s not your real name on your account i was going to try to find your address but unfortunately I didn’t have any of those British white pages sites on me. You should get better OPSEC or something.
This is not my real name
№17260217[Quote]
>>>17260096 (You)
>god there are a lot of fucking nusois here
>did someone link this thread on the website?
they did, thought i would look for some fun
№17260233[Quote]
>>17260217post screencaps of their seethe or gtfo
№17260256[Quote]
hi nufags
№17260266[Quote]
>>>17260171 (You)
>Still have your IRL pictures up.
they do! but it's not exactly a secret if they have it on their GH page.
№17260314[Quote]
>>17260096Yikes let people enjoy things
№17260375[Quote]
i dont want to spend time looking at this codebase that is heavily secured so here is jeetgpt's view (no pocs or verification) here you go britnigger
>>17260266we are going to 'za every "i already know what my personal info is!" nigger
№17260438[Quote]
This was not a raid. you people are fucking useless! You could not hack your way out of a lift with one button.
Claude, Grok, really? is this a bunch of fucking 12 year olds?! come on. we expected effort here.
№17260441[Quote]
>>17260375also i'm not getting that 1k because there's literally nothing that can be used to break into the site and i don't even know what i would even do with the money
maybe it's exploit-chain-able but not sure
№17260442[Quote]
>>17260266I’m going to send a hoard of asylum seekers into your house
№17260472[Quote]
>>17260438GEEEEEEEEEEEEEEEEEEEEEEG