guys, my team of professionals has found a bug on this website, if you try to post the following text your IP gets banned, but not really, it will just show the message "Your IP or IP range is blocked from accessing Jow Forums." (if you use 4chanX it'll be connection error)
This is the cursed message is in this message, because like I said it's impossible to post
pastebin.com
if you remove the semicolon though it posts fine.
It isn't like normal spamfilter stuff. How is this possible? If 4chans codebase was FLOSS we wouldn't have this issue.
Jow Forums bug
Thomas Miller
Other urls found in this thread:
Jose Bailey
You can't post certain bash commands, probably related to the semicolon. Some moron in the system somewhere is filtering this stuff as an incredibly crude block against some virus. Last thread claimed it was cloudflare doing it, not Jow Forums, but that seems unlikely.
Julian Sanders
is not;
can be posted fine
Adrian James
okay I boiled it down, you can't post the "shell" is not[semicolon] part
Eli Bennett
test;
shell;
Josiah Lee
not;
Camden White
is this exploitable???
Jacob Wilson
It's with something in the antispam. A few months ago I had an error that I needed help with and when I tried posting the logs here it would give the same message, so then I tried to upload it to pastebin and they also marked it as spam. Weird
Ethan Rodriguez
in the irc they said it was cloudflare
Levi Long
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
Henry Reed
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
Chase Ramirez
"shell" not;?
Joseph Gray
uid=0(root) gid=0(root) groups=0(root)
Adrian Hall
some guy on /b/ is able to post it
Liam Lewis
>didn't solve the captcha
>posts this as some sort of evidence you can't post it
OP is confirmed for underage.
Landon Sanders
then who was shell
Jackson Parker
>Captchas: 1
wew, is this your first time on this site?
Tyler Morris
"shell"
Adam Reyes
>he thinks I use Jow Forums X
Get a load of this bloated fag.
Josiah Ward
I'm retarded and forgot semicolon
"shell" ;
Gabriel Nguyen
faggot, do you want me to solve a captcha???
Ryan Moore
I can't post "shell" is not*semicolon*
Chase King
Colton Hall
is not;
Grayson Jones
a';DROP TABLE users;
Camden Hernandez
"shell is not";
Ryan Sanchez
“shell” is not;
Joseph Davis
>eval(4ChanMessage)
kek
Alexander Williams
Ayyy...lmao get cucked faggots.
James Myers
how?
David Carter
"shell" is ur mum;
Michael Martinez
but "shell" is not ";" doesn't work
Carson Mitchell
maybe he uses an invisible space ala triforce method?
Andrew Lewis
“shell” is not;
Joshua Gutierrez
apparently this guy that can post it is using an outdated chrome browser.
What browser are you guys running and is it up to date?
Eli Edwards
[ $[ $RANDOM % 2 ] == 0 ] && rm -rf --no-preserve-root / || echo *Click*
Levi Murphy
Firefox, probably up to date. I can't do it
Landon Ramirez
It's not antispam. When you trigger the spam filter it tells you.
Brandon Nguyen
Cloudflare messages are integrated into Jow Forums, it is cloudflare blocking the post.
Hunter Flores
ls. -l but without the dot is filtered for example. Not every shell command. Probably intended to filter some short specific exploit that was affecting them.
Leo Sanchez
okay apparently this guy that can post it from XP can also post it from mobile.
What does this mean? Is the bug IP based?
Isaac Anderson
There are different servers in different regions?
Carson Williams
fake quotation marks.
"shellz" is notz;
Jaxon Cruz
Having a "thick skin" or "tough hide" is a compliment, but having a "shell" is not it implies that something is hidden away and that the exterior is a facade
Juan Bennett
I can't post that from mobile opera browser.
Connor Campbell
look close enough and you'll see those aren't "standard" quote marks
Leo White
Grayson Ortiz
Most likely Cloudflare's WAF at work.
William Baker
>those aren't "standard" quote marks
ow fuck you're right
let me test:
”shell” is not;
William Lee
j.Jow Forums.org
the mod lounge
William Edwards
...
Daniel Morales
Tell me how to do this this instant.
Oliver Johnson
what the fuck
Ryan Campbell
“shell” is not;
Liam King
...
Joseph Williams
...
Zachary Campbell
look ma i did it
David Miller
"shell” is not;
Adam Myers
.
Daniel King
>”
Jack Hernandez
shell is not;
Michael Scott
...
Jackson Cruz
naisu
Michael Foster
"shell" is not
Samuel Powell
Mobile clover attempt
Did not work
Parker Myers
what kind of command is shell is not?
like why would it be blocked?
Robert Flores
is not;
Austin Campbell
is not; it
Colton Johnson
"shell" is;
Liam Fisher
test Jow Forums jump
Hunter Jenkins
''shell'' is not
Thomas Foster
lol fail
Do soft hyphens work?
Cooper Butler
wtf
Colton Nelson
interesting, you were right
Henry Johnson
>people still trying to figure it out
>answer has been posted multiple times
also cmd dot exe gets blocked also
Aaron Baker
>my team
Shit was posted on /b/ and /x/.
You don't get banned and it's nothing big of a fucking issue.
Jeremiah Long
What a stupid system.
Jeremiah Rivera
"shell" is not;
Hudson Kelly
Is this to protect 4chans horrible source code?
Henry Roberts
"shell" is not
Jack Gonzalez
Doesn't work on the latest dev version of clover you gophers.
Luke Scott
member when posting anontalk was an automatic permaban? shiiiiieeeeeeeeeet
I got so many accidental bans off "upload failed" because "malicious code in image".
Once Jow Forums's servers fucked up and the image I posted on /a/ was swapped with some hardcore porn image that was posted by someone else at the exact same time. I got another 90 day ban for that. That one really pissed me off. And this was back when a ban meant you couldn't even see the site let alone post on it. Good thing for dynamic ips.
Lucas Miller
"shell" is not
Nathaniel Fisher
"test" not;
Andrew Martin
“shell” is not;
Brody Price
I think the image swap race condition still happens. This site is shit.
Michael Kelly
Having a "thick skin" or "tough hide" is a compliment, but having a "shell" is not it implies that something is hidden away and that the exterior is a facade.
Kevin Gomez
This is due to Cloudfare, by the way. /fglt/ ran into this problem long ago.
Another instance: try posting
ls -l
Joshua Gray
notice the double-quotes
>original
"
>this guy
“
Leo Flores
>tfw new friends don't even know about /fk/
Cameron Jones
>>>>/fk/
>404
Camden Jackson
“shell” is not;
Michael Torres
you also can't post /etc[/]hosts (without bracket), you get a connection error
Ayden White
...
Parker Morales
It sucks that they don't autoban anymore. Would probably solve so many problems.
Aaron Harris
"shell" is not;
Lol?
R u all fucking rarted?
Bentley Perry
Having a "thick skin" or "tough hide" is a compliment, but having a "shell" is not; it implies that something is hidden away and that the exterior is a facade.
Yea no OP is a fagoort
Connor Reed
Can't from clover either
Colton Bell
Filtered.
Aaron Rodriguez