yep… it was,
oooof
Your right, somebody must be raiding the project
I’ll restore it now
Its back! Same name and all helpers have been evicted.
Should work better, I’m gonna check the source code now
Hey, I’ve found a vulnerability with your project where you can gain full shell access. If you’d like to know the vulnerability then please send me a PM!
2 Likes
So make a copy of the same project. Now create a .env file. Make it so that the program will not start if there is a certain line in the .env file so people have to remix it to try it out.
2 Likes
major security vulnerbility, everything deleted.
ill try to rewind
Like tokens?
20chars
maybe, @J-Tech-Foundation are you sure the package isn’t mallicous? because nearly all the files are gone
well, all the files are there now i’ve rewritten them.
I have commanded the shell to reinstall the web-term package from NPM
no, it is not malicious, else it would be taken down
Nice! Even nano works on it. Does this support mobile devices?
It worked fine on my mobile phone.
Works great on my iPhone 7.
Yep works best on chrome
just got a message saying node modules and start.sh are exposed
Let me make this clear. Setting them to private will disable the auto-execution required on request
I will follow @javaarchive advice and will begin using keys to protect the shell
I HAVE BEEN HIT WITH AN IDEA- DISABLE THE EDITING AND EXECUTION OF COMMANDS
By writing the line enable -n clear we would be disabling the clear command*
*
don’t worry, I’m not mean and I won’t disable the command, it would make our lives harder
The site is here:
In the coming weeks, I will spend time on:
- customising the shell look
- implementing security and blocked commands
- the collection of IP addresses and blocking
- remix instructions
For security reasons, any requests to join will be rejected