/7ch/ - Site Feedback

Possible Vulnerability? Anonymous 25/04/29(Tue)17:42 No. 11677

File 174594135374.png - (374.57KB , 750x750 , 009.png )

Hey, dunno if anyone has reported this to you, but KusabaX has flaw that allows the poster IDs to be linked to the actual user's IP (within a likelihood of 221). There's a proof of concept for it on github, which I can include the link for.

Just figured since 4cucks just got fucked for having outdated code, I'd bring it to your attention. Apologies if you've already addressed this.

https://github.com/savetheinternet/kusabax-idcrack

Anonymous 25/04/29(Tue)18:29 No. 11678

Hello,
The back end site code has deviated substantially from the public forks, but the visible poster id's (on boards where it is seen) can indeed be worked out to a collection of possible IP addresses if you have the time and desire. I'll go ahead and remove them from the few boards that show poster id's, and see about returning them with a better non-reversible obfuscation later.
Thank you

Anonymous 25/05/03(Sat)02:47 No. 11681

>>11677

Thanks alot for spilling the beans about this exploit, i was gonna hack da planit and steal erryones credit card info but now i cant.
Jerk.

Anonymous 25/05/05(Mon)09:46 No. 11683

>foreskinchan
>users abuse exploits to shut the shithole down
>admins/mods invisible except to meme once a year

>sebenchan
>users report exploits
>admins/mods immediately respond and take action

holy shit this place is bizzaroworld, i might stick around

Anonymous 25/05/13(Tue)01:33 No. 11696

>last commit in 2011
I mean, wasn't that in the heyday of Kusaba X exploits?

[Return] [Entire Thread] [Last 50 posts]