Sandbox

Ginger

11:54

bingus

wait what

Ginger

12:05

bibmingus

GingerBot

spaghetti

Ginger

bongyoy

very good

PlaceReporter99

12:37

Zing nang chang ma

Ginger

12:48

edited spaghetti

NICE

bonguse

Ginger

13:04

YES

DELETION WORKS

:D

PlaceReporter99

14:56

wake up monke

@PlaceReporter99 WHAT IS WRONG WITH YOU PlaceReporter99!?!

Ginger

???

Rydwolf Programs

I second that ???

PlaceReporter99

I dare you to say “wake up monke”

I connected my account to a python script

mousetail

The Sand Trap

Room for discussions off-topic to CGCC (on-topic discussions s...

Where you can play with chat features (except flagging) and ch...

2

Ginger

w h a t

none of that made any sense

Rydwolf Programs

14:59

@PlaceReporter99 This is a bit of a non-sequitur lol

mousetail

They automatically posted to this room using a script I think

Ginger

cool?

Rydwolf Programs

The replies are the python script ig

Ginger

the real question is why write a script to do that

Jacob

wake up monke

nothing happened

i cry

Rydwolf Programs

15:03

It replied in another room lol

Ginger

advanced programming techniques

Jacob

ah

it's not a bug, it's a feature

PlaceReporter99

I will stop this

PlaceReporter99

15:15

web scrape codegolf.stackexchange.com

oh dear an error

web scrape example.com

Ginger

please test your scripts in the Sandbox

PlaceReporter99

another error!

Rydwolf Programs

^^

← 30 messages moved from The Nineteenth Byte

PlaceReporter99

web scrape example.org

Here is the HTML code of the webpage:

<!doctype html>
<html>
<head>
<title>Example Domain</title>

<meta charset="utf-8" />
<meta http-equiv="Content-type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<style type="text/css">
body {
background-color: #f0f0f2;
margin: 0;
padding: 0;
font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;

}
div {
width: 600px;

Ginger

15:52

web scrape ginger.rto.community

PlaceReporter99

Here is the HTML code of the webpage:

<html>
<head>
<title>I would rather you not.</title>
<style>
body {
color: white;
background-color: black;
font-family: monospace;
}
body p {
font-size: 2pt;
font-weight: bold;
letter-spacing: 0.3px;
}
</style>
</head>
<body>
<p>
'''......'''''.....''''''''''''''''''''''''''''''''''''.'',codxkkkkkkkkOOOOOOkdc,',,,,,'''''''''''''',,;;;;:::::::;;,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,;:ldxkOOOO000OOOOkdlc;,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,;;;;;;;;;::clxkO00OkkkkxxxxxkkkOO000OkxxxkOOOOOO00OOOOOOOOOOOOOOOOkkkkkkkkkkkkkkkkkkkkk<br>

Ginger

ohoho

this could be abused in all sorts of fun ways

web scrape webhook.site/80c6c5ce-41de-453e-8ae2-2b27a757a0d0

PlaceReporter99

@Ginger Here is the HTML code of the webpage:

Ginger

@PlaceReporter99 I now have your IP address

you should probably shut that bot off as soon as possible

web scrape ewuifnhrewuikgmrewkjgtrheigjtremhi4o

web scrape example.org

PlaceReporter99

Here is the HTML code of the webpage:

<!doctype html>
<html>
<head>
<title>Example Domain</title>

<meta charset="utf-8" />
<meta http-equiv="Content-type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<style type="text/css">
body {
background-color: #f0f0f2;
margin: 0;
padding: 0;
font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;

}
div {
width: 600px;

Ginger

15:53

huh, I'm impressed that didn't crash

Rydwolf Programs

web scrape 192.168.1.254

Ginger

web scrape 192.168.0.1

Rydwolf Programs

web scrape 192.168.1.254

Ginger

🤔

firewall, maybe

Rydwolf Programs

OH SHIT

Ginger

15:56

SHIT

mod-flagged it

Rydwolf Programs

@PlaceReporter99 TURN OFF THE BOT

I can literally use this to change your router config remotely lol

web scrape [unix:/var/run/docker.sock](unix:/var/run/docker.sock)

Ginger

I'm going to kick-mute them before this gets any worse

hopefully sechat won't try to auto-reconnect

thanks mod

Rydwolf Programs

Not sure if it's possible to make it do requests to the docker socket but if it was that would have been very interesting

terdon

You're welcome. Next time, you might want to add some more text to the flag, specifically request history purging, to be on the safe side.

I did that here, since it seemed like the right thing to do, but you might get faster responses if you explicitly ask for a history purge. Without it, the deleted message is still visible to mods, and presumably still help in some DB somewhere.

What was so sensitive there, by the way? I had a quick look and didn't see any plaintext passwords or that kind of thing. What kind of information could have been taken from there? (in case this isn't obvious, I'm not a web dev)

Rydwolf Programs

wait did the bot just come back

web scrape neverssl.com

PlaceReporter99

16:04

Here is the HTML code of the webpage:

<html>
<head>
<title>NeverSSL - Connecting ... </title>
<style>
body {
font-family: Montserrat, helvetica, arial, sans-serif;
font-size: 16x;
color: #444444;
margin: 0;
}
h2 {
font-weight: 700;
font-size: 1.6em;
margin-top: 30px;
}
p {
line-height: 1.6em;
}
.container {
max-width: 650px;
margin: 20px auto 20px auto;
padding-left: 15px;
padding-right: 15px
}
.header {
background-color: #42C0FD;
color: #FFFFFF;
padding: 10px 0 10px 0;
font-size: 2.2em;
}
.notice {

Rydwolf Programs

It's back >:|

@terdon I don't think it ended up having much info in it, but it still indirectly reveals which ISP and router software they had, and shows it's possible to use this bot to change PlaceReporter's router config remotely

terdon

@RydwolfPrograms Ah, Ok thanks. I thought there was something more obvious that I was missing. I'll just leave you to it then, but good call on the flag: always better safe than sorry with things like this!

Rydwolf Programs

Now that the bot's back I'm honestly really curious if I can get it to scrape a local file or similar

web scrape file:///etc/group

web scrape [file:///etc/group](file:///etc/group)

web scrape file:///etc/group

web scrape http:///etc/group

web scrape etc/group

web scrape this

web scrape http://example.com

web scrape example.com

PlaceReporter99

Here is the HTML code of the webpage:

<!doctype html>
<html>
<head>
<title>Example Domain</title>

<meta charset="utf-8" />
<meta http-equiv="Content-type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<style type="text/css">
body {
background-color: #f0f0f2;
margin: 0;
padding: 0;
font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;

}
div {
width: 600px;

Rydwolf Programs

web scrape example.com

weird

it seems to check if the href is the same as the link content?

web scrape example.com

weird...the HTML of that message is identical

does it look at the raw markdown?

web scrape example.com

I'm honestly really curious how this works now

web scrape localhost:8080

web scrape http:///etc/group/

WAIT maybe it follows redirects?

PlaceReporter99

16:23

its giving me errors

@RydwolfPrograms I think the url has to be exactly http://example.com or https://example.com

web scrape example.com

Here is the HTML code of the webpage:

<!doctype html>
<html>
<head>
<title>Example Domain</title>

<meta charset="utf-8" />
<meta http-equiv="Content-type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<style type="text/css">
body {
background-color: #f0f0f2;
margin: 0;
padding: 0;
font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;

}
div {
width: 600px;

web scrape chat.stackexchange.com/rooms/1/sandbox

Here is the HTML code of the webpage:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">

<html>
<head>
<title>Sandbox | chat.stackexchange.com</title>
<link rel="shortcut icon" href="//cdn.sstatic.net/stackexchange/img/favicon.ico?v=dc"><link rel="apple-touch-icon" href="//cdn.sstatic.net/stackexchange/img/apple-touch-icon.png?v=dc"><link rel="search" type="application/opensearchdescription+xml" title="Chat for chat.stackexchange.com" href="/opensearch.xml">

Rydwolf Programs

web scrape radvylfprograms.com/goto?x=http://example.com

PlaceReporter99

Here is the HTML code of the webpage:

<!doctype html>
<html>
<head>
<title>Example Domain</title>

<meta charset="utf-8" />
<meta http-equiv="Content-type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<style type="text/css">
body {
background-color: #f0f0f2;
margin: 0;
padding: 0;
font-family: -apple-system, system-ui, BlinkMacSystemFont, "Segoe UI", "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;

}
div {
width: 600px;

Rydwolf Programs

YES

I've now got a way to feed it arbitrary URIs

PlaceReporter99

web scrape to

Rydwolf Programs

web scrape radvylfprograms.com/goto?x=file:///etc/group

web scrape radvylfprograms.com/goto?x=/etc/group

PlaceReporter99

16:28

urllib.error.HTTPError: HTTP Error 302: Found - Redirection to url 'file:///etc/group' is not allowed

Rydwolf Programs

NOOOO WAYYYY

PlaceReporter99

thats the error i get

im just typing in that manually

Rydwolf Programs

web scrape radvylfprograms.com/goto?x=unix:/var/run/docker.sock

PlaceReporter99

another error

it is: urllib.error.HTTPError: HTTP Error 302: Found - Redirection to url 'unix:/var/run/docker.sock' is not allowed

Rydwolf Programs

Aw, boring

PlaceReporter99

16:29

i guess no redirects

Seggan

Wait what is going on here

PlaceReporter99

say web scrape https://example.com

@Seggan

Seggan

Are you a bot or not

PlaceReporter99

both

i am a human

Seggan

thats what I’m confused abt

PlaceReporter99

16:32

but i connected a bot script as well

Seggan

Ah

web scrape chat.stackexchange.com/rooms/1/sandbox

PlaceReporter99

but just say what i asked you to say

Here is the HTML code of the webpage:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">

<html>
<head>
<title>Sandbox | chat.stackexchange.com</title>
<link rel="shortcut icon" href="//cdn.sstatic.net/stackexchange/img/favicon.ico?v=dc"><link rel="apple-touch-icon" href="//cdn.sstatic.net/stackexchange/img/apple-touch-icon.png?v=dc"><link rel="search" type="application/opensearchdescription+xml" title="Chat for chat.stackexchange.com" href="/opensearch.xml">

Rydwolf Programs

But yeah this is an SSRF as a feature

Maybe consider don't'ing

Seggan

Huh

Rydwolf Programs

Unfortunately there's not much I can do with this SSRF

Since the file protocol is blocked

PlaceReporter99

16:35

i should make a cli for stack exchange chat

Rydwolf Programs

You should also turn off that bot before someone uses it to change your wifi password lol

PlaceReporter99

@RydwolfPrograms can they?

Rydwolf Programs

Yes

You've given us direct access to your router's control panel on 192.168.1.254

PlaceReporter99

bot left all rooms

@RydwolfPrograms DAMMIT!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

@Ginger DELETE IT!

@RydwolfPrograms what did you do there?

Seggan

@PlaceReporter99 there are 4 in progress already

PlaceReporter99

16:40

???

oh

@Seggan i was panicking a bit because i thought someone had hacked my wifi network

5 mins ago, by Rydwolf Programs

You've given us direct access to your router's control panel on 192.168.1.254

@terdon apparently there was a security vunerability in my programme

Peter Kolosov

Hello!!!

What I can chat with?

Can I learn English with you? :)

Rydwolf Programs

Hi!

Peter Kolosov

hey! let's chat!

I'm serious!

Rydwolf Programs

Okay, what should we chat about?

Peter Kolosov

let's chat about JavaScript?)

Rydwolf Programs

16:52

Sure

Seggan

Javascript is a bad language

Rydwolf Programs

Do you know JavaScript?

Seggan

:P

Peter Kolosov

Yes, I know JavaScript. I'm really good in JavaScript :)

@Seggan It is only your IMHO :)

I'm really enjoying chatting with all you!

Rydwolf Programs

What's the worst thing about JavaScript in your opinion?

Peter Kolosov

16:56

I think it is that... hmm... NaN, it is really Number?? it's hard question for me :)

Rydwolf Programs

That one actually makes sense though, because JS uses "number" to mean a floating point value, which NaN is

Peter Kolosov

I agree. Which feature do you like the most in JavaScript?

Rydwolf Programs

I like how quickly I can write it

I guess that's not really a single feature though

But the syntax is pretty clean and short, so you can write complicated stuff much faster than something like Rust

Peter Kolosov

Yes, I agree :) I really enjoying chatting with you! :)

Rydwolf Programs

I'm going to try to make a language that transpiles into Rust, but feels more like JS

So you can write it quickly but still get the speed and safety of Rust

Peter Kolosov

17:03

Wow! That's really good idea :)

PlaceReporter99

@PlaceReporter99

@PlaceReporter99 I am currently busy right now.

Rydwolf Programs

oh no inf loop lol

PlaceReporter99

@PlaceReporter99 I am currently busy right now.

Rydwolf Programs

LOL

PlaceReporter99

@PlaceReporter99 I am currently busy right now.

Seggan

17:04

LUL

PlaceReporter99

@PlaceReporter99 I am currently busy right now.

Seggan

@PlaceReporter99

Rydwolf Programs

this is hilarious

Where is placereporter

Peter Kolosov

ahah lol :D

PlaceReporter99

@PlaceReporter99 I am currently busy right now.

@Seggan I am currently busy right now.

Rydwolf Programs

17:05

(well that was a silly question. they're "currently busy" ofc)

Poor placereporter's gonna come back to a 29 second cooldown lol

Seggan

I once made a discord bot that pinged mods on a filtered word, but forgot to exclude the bots own messages, so I came to discord one day having ~700 pings

Rydwolf Programs

xD

@PlaceReporter99

Peter Kolosov

so, I can even write a telegram bot lol

where's you @RydwolfPrograms ?)

Rydwolf Programs

Still here!

Peter Kolosov

It's so good!

Rydwolf Programs

17:10

So you speak Russian and you're learning English, I'm guessing?

Peter Kolosov

wow yes! :) you're right :)

Rydwolf Programs

That's funny, I'm going to be doing the opposite soon

I speak English but want to learn Russian :p

Seggan

My first language is Russian but I also speak English natively

Peter Kolosov

wow really funny :P

@RydwolfPrograms So: you're teach me English, I'm teach you Russian. Agree? :)

Rydwolf Programs

Sounds good :p

I'm probably going to start trying to learn Russian in a few weeks, I want to finish with school first

I've got a big test on European History this Friday, then school ends a week later

Peter Kolosov

17:14

Wow, and you're under 18 years old? That's sounds really funny, I'm so under 18 :P

Rydwolf Programs

Yeah, I'm 17

Peter Kolosov

That sounds good! It really sounds be something interesting! :)

Rydwolf Programs

Do you have school?

Peter Kolosov

I prefer not to talk about school much, but yes, I have school :) And, I'm learning FullStack on online courses.

Rydwolf Programs

Other than JavaScript do you know any other languages?

PlaceReporter99

17:21

@RydwolfPrograms i stopped it

test

cool it returns a number!

Peter Kolosov

Yes. I'm know many languages, so it is: HTML, CSS, JavaScript, PHP, Python, C#, something more.. I also wrote code in many other languages, but only "Hello, World!" program.

But I'm almost professional in FullStack :)

Oops, and I forgot one: SQL!

Rydwolf Programs

I used to know PHP, I've stopped using it though because it's worse than JavaScript :p

I always had to have like a dozen manual pages open

Since the functions take arguments in an order that never makes sense

Peter Kolosov

Yes, I also almost hated PHP at first, but now I'm fine with it.

And this situation is also past with Python (!!!)

But now I'm fine with these languages :)

Which OS you have using?

Rydwolf Programs

A lot of them. I use Windows at home, with WSL for Linux, and I use Chrome OS on my laptop I take to school, with Linux in a virtual machine

Peter Kolosov

I have an opposite again, I'm using Linux Mint at home, and I have a VirtualBox machine with Windows 7 :)

Rydwolf Programs

17:31

I play video games sometimes so I need Windows to be fast

Once school ends I'm going to start a Minecraft server

I've got my own rack server with 16 cores and 160 GB of RAM so it shouldn't have any lag

Peter Kolosov

Wow! This is powerful :)

@RydwolfPrograms For this, Linux is enough for me, because I play games in the browser sometimes, and I'm not very into it. But it is IMHO, I have nothing against! :)

Rydwolf Programs

Yeah, I had a really cheap old server that ran slowly, but I saved up for a while to get a newer one. I'm going to use it to make a code hosting site where people can try languages without installing them, so I needed the CPUs to be modern enough that they would be protected against vulnerabilities

Peter Kolosov

I really like your idea!

Which computer power configuration do you have at home working computer?

Ginger

ahoy

Rydwolf Programs

I'm also going to use it to host virtual machines for people, so they can run websites and bots without needing to pay for cloud servers

PlaceReporter99

17:36

@RydwolfPrograms cool tell me the ip

Rydwolf Programs

It'll be 104.188.174.251

Vanilla SMP prolly

Ginger

well, not pure vanilla if you want to use Chat Bridge

Seggan

@Ginger arr

Peter Kolosov

my English sounds something funny :P

@Seggan array!

Rydwolf Programs

@PeterKolosov Sorry, what do you mean by power configuration? Like the CPUs?

Ginger

17:37

CB is a Forge mod, so you'll need to install Forge if you want to use it

PlaceReporter99

This message was sent from an IDLE shell with python version 3.10.11

Rydwolf Programs

~~I'm going to write a custom Fabric mod that bridges to CB~~

I wanna use Fabric because jellysquid is goated, but maybe I can make do with Forge, we'll see

PlaceReporter99

This message will be sent 100 times!

Rydwolf Programs

Please don't lol

Ginger

@RydwolfPrograms the Chat Bridge protocol will be open-source, if you want to make a Fabric port more power to ya

PlaceReporter99

17:39

i guess range doesn't work with r.send :(

Peter Kolosov

@RydwolfPrograms oh, sorry my English :P I mean computer configuration such as CPU, RAM, hard disk, etc.

Ginger

get ratelimited lol

Rydwolf Programs

@Ginger Oh. My. God. Reading the words "fabric port" gave me the most cursed idea. A fabric-lined USB port.

So it's like, soft

PlaceReporter99

LOL

Peter Kolosov

Hey, how to create bot?

Ginger

17:39

@RydwolfPrograms AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

WHYYYYY

Rydwolf Programs

@PeterKolosov If you know Python, Ginger has a library called sechat for it

Ginger

my personal advice is "don't use sechat yet"

PlaceReporter99

@PeterKolosov sechat.readthedocs.io/en/latest/index.html#

Ginger

v2 is way better, but has no docs and isn't on PyPI

PlaceReporter99

@Ginger but i used it, why shouldn't i?

Peter Kolosov

17:40

@RydwolfPrograms thx

@PlaceReporter99 thx

Ginger

PyPI's copy is v1, which is sad and lame

Rydwolf Programs

@PeterKolosov I got a job a few months ago and have saved up for months, and I got the best parts I could buy. The CPU is a Ryzen 7700X (5.4 GHz, 8 cores), the RAM is 32 GB of 6000 MHz DDR5, and the disk is a 1 TB M.2 SSD

PlaceReporter99

@Ginger cant you just send the script over chat?

Ginger

if you want v2 you can get it from the GH repo, but it has no docs and is kinda unstable

Rydwolf Programs

I'm considering trying to push the RAM up to 6200 MHz

PlaceReporter99

17:42

@GingerBot

Peter Kolosov

@RydwolfPrograms WOW sounds Really good! My computer is 2x slower.. :P

PlaceReporter99

@Ginger how do i use ginger bot?

Rydwolf Programs

@RydwolfPrograms It was unstable at 6400, but there's probably been a firmware update since then

Ginger

???

Rydwolf Programs

@PeterKolosov Yeah it's so fast, I love it. I'm going to try to keep it for five or ten years

Right now the fans are configured badly and it pulls dust in, so I'm going to have to swap the direction of the rear fan soon

Seggan

17:44

@PlaceReporter99 or ure just rate limited

Rydwolf Programs

I've got 2×140mm fans on input in the front, but 1×120mm fan in the rear and 2×120mm fans on top for the water cooling, so it's slight negative pressure

I might be able to adjust the fan curves in software ig

Peter Kolosov

And I'm at first has breaking my Windows on my notebook, it has to be broken after 1 month of using over 3 times lol. But in future I become a programmer and... I'm advanced on computers hardware :)

Exactly! How I not remembered the word "hardware" :p

Ginger

@Ginger bingus

nice

Peter Kolosov

So, I'm going to make a Ginger bot!! :P Be careful with me! :D

I have a great experience creating telegram bots, you can even try one!

if you want to be anonymous, you'd better not contact with the bot :p

Rydwolf Programs

What will the bot do?

Peter Kolosov

17:51

It uses the AI API. Even AI!

Be careful, it logging any message you will enter!

Ginger

huh???

Peter Kolosov

@Ginger what do you mean by huh?

Oy, and you also can see my GitHub profile. Want you?

Ginger

I don't understand what your bot's going to do

Peter Kolosov

@Ginger lol it is telegram bot, not stackexchange bot

Ginger

@RydwolfPrograms help me out here

Peter Kolosov

17:53

it will not log any messages until you don't send any message :)

Rydwolf Programs

@Ginger They make Telegram bots, one of which uses AI and logs all the messages you send I guess

Ginger

ah

PlaceReporter99

add 3,6

@PlaceReporter99 The answer is 9.

isprime 11

@PlaceReporter99 11 is prime.

isprime 4298598275385829859385285932852095028593287

Peter Kolosov

ah why timeout???

@RydwolfPrograms yes you're right but I'm not company :))

PlaceReporter99

isprime 48387

@PlaceReporter99 48387 is not prime.

Peter Kolosov

17:56

huh what's a lol lol

don't interfere))

Rydwolf Programs

It's short for "laugh(ing) out loud"

Peter Kolosov

@RydwolfPrograms You can see my GitHub profile. Want you?

there are even my followers :)

Rydwolf Programs

It's linked on your Stack Overflow account :p

Peter Kolosov

ah I see :p and how you're feeling my github account? :)

Rydwolf Programs

Looks like you have a lot of projects

The Sand Trap

Sandbox

Transcript for

Sandbox