[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip / qa] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology


Thread archived.
You cannot reply anymore.


[Advertise on 4chan]


File: 16959299398665232.jpg (291 KB, 1024x892)
291 KB
291 KB JPG
4chan hacker found a zeroday on basketweavers.im

https://basketweavers.im/topic_1731916144001__Found_a_zeroday_on_ths_website_
>>
>>103223284
buy an ad
>>
>oh nooo my /d/ post history!
Faggot
>>
>>103223284
You can send files to the server, lmao (I think)
>>
// ==UserScript==
// @name weaverx
// @version 2024-11-18
// @description bunch of features for basketweavers
// @author ussao
// @match https://basketweavers.im/*
// @grant none
// ==/UserScript==

function handleTimer(cb){
let input = document.querySelector("textarea[name='topic']")
let btn = document.querySelector("button[type='submit']")

if (!input){ // it's inside a thread
input = document.querySelector("textarea[name='reply']")
}

btn.addEventListener("click", (ev)=>{
ev.preventDefault()
let t = Date.now()
let x = new Date(t)

if(cb.checked){
input.value += "\n" + x.toLocaleString()
}

input.parentElement.submit()
})
}

let form = document.querySelector("form[method='POST']")

if (form){
let cb_timer = document.createElement("input")
cb_timer.type = "checkbox"
cb_timer.name = "timer"

let cb_lbl = document.createElement("label")
cb_lbl.htmlFor = "timer"
cb_lbl.textContent = "Add time?"

form.appendChild(cb_lbl)
form.appendChild(cb_timer)

let t = document.createElement("input")
t.type = "file"
t.name = "file"
form.appendChild(t)

handleTimer(cb_timer)
}
>>
that explains >>103223691
>>
>>103223988
uhoh



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.