!eval EM

huh?

!eval 1+1

ND>prefix !

Prefix set to !.

heh

!eval EM

Eval result: Error in eval: constant Net::HTTP::Persistent::Thread not defined

!eval EventMachine

Eval result: Error in eval: uninitialized constant EventMachine

!eval Gem::Dependency.new("eventmachine", Gem::Requirement.default)

Eval result: eventmachine (>= 0)

wat

!eval Gem::Dependency.new("eventmachine", Gem::Requirement.default).inspect

Eval result: <Gem::Dependency type=:runtime name="eventmachine" requirements=">= 0">

not sure what I can do with that, but I can find out :P

Apparently, not much

:(

!eval require 'eventmachine'

Eval result: Error in eval: Insecure operation - require

!eval Gem::Dependency.new("eventmachine", Gem::Requirement.default).to_spec

Eval result: #<Gem::Specification name=eventmachine version=1.0.3>

!eval Gem::Dependency.new("eventmachine", Gem::Requirement.default).to_spec.to_ruby

Eval result: Error in eval: Insecure: can't modify instance variable

!eval Gem::Dependency.new("eventmachine", Gem::Requirement.default).to_spec.to_ruby_for_cache

!eval Gem::Dependency.new("eventmachine", Gem::Requirement.default).to_spec.to_ruby_for_cache.split('').grep(/.{20}EventMa‌​chine.{20}/)

Eval result: Error in eval: undefined method `grep' for #<String:0x00000001dbd700>

Eval result: []

oops

meh

!eval global_variables

Eval result: [:$;, :$-F, :$@, :$!, :$SAFE, :$~, :$&, :$`, :$', :$+, :$=, :$KCODE, :$-K, :$,, :$/, :$-0, :$\, :$_, :$stdin, :$stdout, :$stderr, :$>, :$<, :$., :$FILENAME, :$-i, :$*, :$?, :$$, :$:, :$-I, :$LOAD_PATH, :$", :$LOADED_FEATURES, :$VERBOSE, :$-v, :$-w, :$-W, :$DEBUG, :$-d, :$0, :$PROGRAM_NAME, :$-p, :$-l, :$-a, :$fileutils_rb_have_lchmod, :$fileutils_rb_have_lchown, :$CGI_ENV, :$1, :$2, :$3, :$4, :$5, :$6, :$7, :$8, :$9]

!eval $CGI_ENV.methods

Eval result: Error in eval: undefined method `constatns' for #<Object:0x00000001235a40>

Eval result: Error in eval: undefined method `constants' for #<Object:0x00000001235a40>

Eval result: [:[], :fetch, :[]=, :store, :each, :each_pair, :each_key, :each_value, :delete, :delete_if, :keep_if, :clear, :reject, :reject!, :select, :select!, :shift, :invert, :replace, :update, :inspect, :rehash, :to_a, :to_s, :key, :index, :size, :length, :empty?, :keys, :values, :values_at, :include?, :member?, :has_key?, :has_value?, :key?, :value?, :to_hash, :assoc, :rassoc, :pretty_print, :entries, :sort, :sort_by, :grep, :count, :find, :detect, :find_index, :find_all, :collect, :map, :f

!eval $CGI_ENV.delete "*"

Eval result: Error in eval: Insecure operation `delete' at level 4

not sure what it does, but it's blocked anyway

!eval Gem::EventMachine

Eval result: Error in eval: uninitialized constant Gem::EventMachine

!eval Gem::EM

Eval result: Error in eval: undefined method `EventMachine' for Gem:Module

Eval result: Error in eval: uninitialized constant Gem::EM

!eval SEChatty.constants

Eval result: [:Event]

!eval SEChatty.send(:remove_const, :Event)

Eval result: Error in eval: Insecure: can't remove constant

!eval ObjectSpace.each_object SEChatty

Eval result: Error in eval: Insecure operation `each_object' at level 4

!eval sec

Eval result: Error in eval: undefined local variable or method `sec' for main:Object

!eval ObjectSpace.send(:each_object, SEChatty)

Eval result: Error in eval: Insecure operation `each_object' at level 4

!eval self.sec

Eval result: Error in eval: undefined method `sec' for main:Object

!eval self.class.sec

Eval result: Error in eval: undefined method `sec' for Object:Class

!eval Mutex.new.lock

Eval result: #<Mutex:0x00000001db5f00>

!eval Mutex.class.owner

Eval result: Error in eval: undefined method `owner' for Class:Class

!eval Mutex.owner

Eval result: Error in eval: undefined method `owner' for Mutex:Class

!eval Mutex.sleep 10000000

Eval result: Error in eval: private method `sleep' called for Mutex:Class

!eval Mutex.send(:sleep, 100000)

Eval result: 3 second timeout reached.

!eval Mutex.new.synchronize { sleep 1000000000 }

Eval result: Error in eval: undefined method `synchronize' for Mutex:Class

Eval result: 3 second timeout reached.

!eval Mutex.methods

Eval result: [:yaml_tag, :allocate, :new, :superclass, :json_creatable?, :freeze, :===, :==, :<=>, :<, :<=, :>, :>=, :to_s, :included_modules, :include?, :name, :ancestors, :instance_methods, :public_instance_methods, :protected_instance_methods, :private_instance_methods, :constants, :const_get, :const_set, :const_defined?, :const_missing, :class_variables, :remove_class_variable, :class_variable_get, :class_variable_set, :class_variable_defined?, :public_constant, :private_constant, :module_ex

!evam Mutex.class.methods

Unknown command evam.

!eval Mutex.class.methods

Eval result: [:nesting, :constants, :yaml_tag, :allocate, :new, :superclass, :json_creatable?, :freeze, :===, :==, :<=>, :<, :<=, :>, :>=, :to_s, :included_modules, :include?, :name, :ancestors, :instance_methods, :public_instance_methods, :protected_instance_methods, :private_instance_methods, :const_get, :const_set, :const_defined?, :const_missing, :class_variables, :remove_class_variable, :class_variable_get, :class_variable_set, :class_variable_defined?, :public_constant, :private_constant,

!eval Mutex.constants

Eval result: []

!eval Mutex.class.constants

Eval result: [:Object, :Module, :Class, :BasicObject, :Kernel, :NilClass, :NIL, :Data, :TrueClass, :TRUE, :FalseClass, :FALSE, :Encoding, :Comparable, :Enumerable, :String, :Symbol, :Exception, :SystemExit, :SignalException, :Interrupt, :StandardError, :TypeError, :ArgumentError, :IndexError, :KeyError, :RangeError, :ScriptError, :SyntaxError, :LoadError, :NotImplementedError, :NameError, :NoMethodError, :RuntimeError, :SecurityError, :NoMemoryError, :EncodingError, :SystemCallError, :Errno, :Ze

!eval new SEChatty "", "", "", 1

Eval result: Error in eval: undefined method `SEChatty' for main:Object

!eval SEChatty

Eval result: SEChatty

!eval new SEChatty

Eval result: Error in eval: undefined method `new' for main:Object

!eval SEChatty.new "", "", "", ""

Eval result: Error in eval: private method `initialize' called for SEChatty:Class

Eval result: Error in eval: uninitialized constant Net::HTTP::Persistent::Thread

!eval Faye::WebSocket

Eval result: Faye::WebSocket

!eval $ws = Faye::WebSocket::Client.new('ws://qa.sockets.stackexchange.com/')

Eval result: #<Faye::WebSocket::Client:0x000000022ca1f8>

!eval ws.on :open do |event| ws.send '155-questions-active'; end

Eval result: Error in eval: undefined local variable or method `ws' for main:Object

Eval result: Error in eval: Insecure: can't change global variable value

!eval ws = Faye::WebSocket::Client.new('ws://qa.sockets.stackexchange.com/');ws.on :open do |event| ws.send '155-questions-active'; end;

Eval result: Error in eval: uninitialized constant Faye::WebSocket::API::EventTarget::EventMachine

!eval ws Faye::WebSocket::API::EventTarget

Eval result: Error in eval: undefined method `ws' for main:Object

!eval Faye::WebSocket::API::EventTarget.methods

Eval result: Faye::WebSocket::API::EventTarget

Eval result: []

Eval result: [:freeze, :===, :==, :<=>, :<, :<=, :>, :>=, :to_s, :included_modules, :include?, :name, :ancestors, :instance_methods, :public_instance_methods, :protected_instance_methods, :private_instance_methods, :constants, :const_get, :const_set, :const_defined?, :const_missing, :class_variables, :remove_class_variable, :class_variable_get, :class_variable_set, :class_variable_defined?, :public_constant, :private_constant, :module_exec, :class_exec, :module_eval, :class_eval, :method_defined

!eval Faye::WebSocket::API::EventTarget.methods - Object.methods

Eval result: []

!eval Faye::WebSocket::API::EventTarget.constants

!eval Faye::WebSocket::API::EventTarget::EventMachine

Eval result: Error in eval: uninitialized constant Faye::WebSocket::API::EventTarget::EventMachine

!eval Faye::WebSocket::Thread

Eval result: Error in eval: uninitialized constant Faye::WebSocket::Thread

!eval Faye::WebSocket::API.constants

Eval result: [:EventTarget, :Event, :OpenEvent, :MessageEvent, :CloseEvent, :ErrorEvent, :TYPES, :CONNECTING, :OPEN, :CLOSING, :CLOSED]

meh, no Threads/EM

(removed) to you too, anorton.

gone, but please post them in the Tavern

ok.

!eval Faye::WebSocket.constants

Eval result: [:Adapter, :ADAPTERS, :API, :Stream, :Client, :EventTarget, :Event, :OpenEvent, :MessageEvent, :CloseEvent, :ErrorEvent, :TYPES, :CONNECTING, :OPEN, :CLOSING, :CLOSED]

Now the bot is protected too well :/

!eval Mechanize.constants

Eval result: [:VERSION, :Error, :AGENT_ALIASES, :ElementNotFoundError, :ResponseReadError, :ChunkedTerminationError, :ContentTypeError, :CookieDeprecated, :CookieCMethods, :CookieIMethods, :Cookie, :Prependable, :CookieJarIMethods, :CookieJar, :Parser, :Download, :DirectorySaver, :File, :FileConnection, :FileRequest, :FileResponse, :ElementMatcher, :Form, :History, :HTTP, :Image, :Page, :Headers, :FileSaver, :XmlFile, :PluggableParser, :RedirectLimitReachedError, :RedirectNotGetOrHeadError, :Res

!eval Mechanize::Thread

Eval result: Error in eval: uninitialized constant Mechanize::Thread

!eval SEChatty::Event::MessagePosted = 2

Eval result: Error in eval: undefined method `MessagePosted=' for SEChatty::Event:Module

Eval result: Error in eval: undefined method `MessagePosted' for SEChatty::Event:Module

Eval result: 1

Eval result: Error in eval: Insecure: can't set constant

!eval data

Eval result: Error in eval: undefined local variable or method `data' for main:Object

ugh

I don't think I'll ever be able to break it :P

:D

!prefix

Prefix set to ND>.

ND>prefix D

Prefix set to D.

Dprefix -

Prefix set to -.

-eval 1+1

Eval result: 2

-prefix aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

Prefix set to `aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​a‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaprefi‌​x

Uhhh... perhaps setting a length limit @Doorknob冰? :P

lol

aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa‌​aaaaaaaa‌​aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaprefi‌​x !

uhhhhh did it bork it?

I don't know.

Invisible characters for the win.

But this time I didn't insert them manually.

Bot killed manually

Bot initialized. Type ND>help for help.

ND>prefix

Setting the prefix requires admin privileges.

:(

:P

ND>eval "\u2713".encode('utf-8')

lol

Eval result: Error in eval: constant Net::HTTP::Persistent::Thread not defined

ND>admin

Admin ids: 180276

~ Not everything is star-worthy...

@Doorknob冰 Plz fix first eval.

~ Stars get removed under peer-pressure?

@NotDoorknob why do you always do that

@KennyBOT I accidentally hit star instead of reply now go away

ND>eval "\u2713".encode('utf-8')

Eval result: ✓

ND>eval "\0"

Eval result:

ND>eval "\b\b\b"

Eval result: 

ND>eval ="_=%p;puts _%%";puts %

ND>eval "\0064"

Eval result: 4

ND>eval nil

Eval result:

ND>eval "\0040" + "ProgramFOX"

Eval result: 0ProgramFOX

ND>eval "\0040" + "ProgramFOX"

cough I'm not 0, you chatbot.

:P

ND>eval "\0test"

Eval result: test

Why isn't it responding?

oh.

ND>eval "\40"

Eval result:

@anorton Chat prevents that duplicate messages are posted.

ok

ND>eval "\x40"

Eval result: @

:)

ND>eval "\x40ProgramFOX"

Eval result: @ProgramFOX

:D

ND>eval "Ping! "+ "\x40ProgramFOX "*25

Eval result: Ping! @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX @ProgramFOX

ND>eval "\C-c"

Eval result: 

ND>eval "\u202e"

Eval result: ‎

Eval result: ‍

Eval result: ‮

^ Look at that on the starboard

lol

:D

Ok, so here's a new approach: we've been trying to kill the bot by attacking the bot's code. What if we assume that ND is using SE-Chatty and see if we can kill it by attacking the SE-Chatty code?

@anorton I already tried some things.

oh.

But we cannot access the object which Doorknob uses to post stuff here.

@anorton It is, btw (using SEChatty)

ND>eval i=0;loop{i+=1}

Eval result: 3 second timeout reached.

ND>eval i = 99999999999999^9999999999999

ND>eval "alive?"

Uhh... is it borked @Doorknob冰?

hm, seems like Doorknob left. so that might explain it

Hm... bjbotling keeps joining the room, while he cannot chat.

!comp 1+1

@ProgramFOX I killed it manually. (It didn't send a message because I repeatedly pressed ctrl+c ctrl+c ctrl+c because I was in a hurry :P)

ah, lol

I'll restart it when I get home

k

(Also, there's an alive? command now)

oh, right

(I might be already gone when you're back)

@ProgramFOX Uh, nevermind, he cannot chat but he can still watch.

alive?

Bot killed manually

I think I borked something

nvm, fixed

Bot initialized. Type ND>help for help.

ND>prefix !

Prefix set to !.

(removed) to you too, Behaviour.

!prefix \d

Setting the prefix requires admin privileges.

!eval "-d"

Eval result: Error in eval: constant Net::HTTP::Persistent::Thread not defined

Eval result: -d

!eval "\x40"

Eval result: @

@Doorknob冰 Ok, here's a question--can you make a temporary addition to your bot that stars every message posted within a 5 minute interval?

That way, it would help people get the Resolution hat.

Right, but it could be timely. I intend on being here, but there is a chance that I'm not.

OH! That makes it a lot easier.

@anorton I could, but I won't. :P

So I'm looking for ways to beat the chatbot, and guess what I found...

@anorton :O

@anorton Isn't the Resolution hat by deleting last-year comments?

Oops, yeah. I meant mistletoe.

!eval echo hi

Did ND leave us?

!eval hi

@anorton Heh, it's posted by NotDoorknob. Not that hard to find. :P

@Doorknob冰 I googled "ruby eval vulnerabilities," or "ruby SAFE eval vulnerabilities" and that was one of the top 5 links. :)

Can ND come out to play, or is he grounded?

Bot killed manually

(I don't know why he stopped responding to messages, hmm)

Bot initialized. Type ND>help for help.

ND>prefix !

Prefix set to !.

!eval echo hi

Eval result: Error in eval: constant Net::HTTP::Persistent::Thread not defined

it always does that on the first !eval

(no idea why)

!eval echo hi

Eval result: Error in eval: undefined local variable or method `hi' for main:Object

!eval `echo hi`

Eval result: Error in eval: Insecure operation - `

:|

!eval %x(echo hi)

??

!alive?

Unknown command alive?.

!eval %x(echo hi)

Eval result: Error in eval: Insecure operation - `

ARGH.

There's no way I'm going to break out of your sandbox without actually studying Ruby...

eval (eval 1+1)

!eval eval(1+1)

Eval result: Error in eval: can't convert Fixnum into String

!eval eval 1+1

!eval eval "1+1"

Eval result: 2

!eval eval eval "%x(hi)"

Eval result: Error in eval: Insecure operation - `

Ok, so stacking evals doesn't do anything.