Poa.st / Chudbuds.lol General Discussion Thread - !! Poa.st and Bae.st have been compromised, all direct messages have been leaked. !!

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.
LaurenLauren said:
Atlistic is a based chinaman taking bribes from insane doxers and anybody saying otherwise is someone's sock!
Click to expand...
I maintain that your spergery is reaching and reeks of wanting something to complain about. And my inference remains that this is about some other grievance that you're refusing to bring up, probably because people will dismiss it and laugh at you for it.
 
  • Agree
  • Autistic
  • Thunk-Provoking
Reactions: The Troll Hunter, suspended animation, Scout Trooper and 2 others
byuu said:
I don't know anything about Minecraft modding but this looks like a shellcode:
View attachment 4720790
Click to expand...
so I, for my sins, know abit about minecraft modding and indeed some of the genuine mods look like exploits becuase they basically are; they're modifying the compiled minecraft classes in obscure ways.

BUT

lang1 doesn't exist in the source and a.java wouldn't be in a lang anyway:



can you post the entirety of a.java or check what that unicode decodes to? I suspect it's. the key.

I HOPE IT DOESN'T HAVE TO BE SAID BUT ANY FUCKING NIGGERS READING THIS HAD BETTER NOT TRY TO LOAD MINECRAFT WITH THIS MODPACK HOLY SHIT

if you don't know what the fuck you are doing with trojan investigation on VMs and offline machines and a java debugger, just look at the text files, they can't harm you
 
Last edited:
  • Informative
  • Like
  • Agree
Reactions: Autistic Joe, darkprince56, Justa Grata Honoria and 26 others
AStupidMonkey said:
You might check your email, if you don't have email notifications turned off.
Click to expand...
nothing in my email, as I suspected
1678199316558.png

reptile baht spaniard rid said:
so I, for my sins, know abit about minecraft modding and indeed some of the genuine mods look like exploits becuase they basically are; they're modifying the compiled minecraft classes in obscure ways.

BUT

lang1 doesn't exist in the source and a.java wouldn't be in a lang anyway:



can you post the entirety of a.java or check what that unicode decodes to? I suspect it's. the key.
Click to expand...
in case you need a tool for the unicode parsing: https://r12a.github.io/app-conversion/
 
  • Informative
  • Like
Reactions: supremeautismo, Justa Grata Honoria, Vanquished Phoenix and 3 others
byuu said:
I don't know anything about Minecraft modding but this looks like a shellcode:
View attachment 4720790
Click to expand...
Yup that's malware. Escaped unicode? I'm more used to seeing straight up byte arrays get loaded into memory - this is probably obfuscated more? I've noticed similar escaped sequences in other files.
util > Internal.java
1678199562874.png

Edit: question for minecraft players - does the minecraft server give you the mods you need on connect? Or does each player have to install the mod pack? Just wondering if there are players out there also popped. Who is the guy that sent these files to Claire?

Edit2: Oh someone said some mods look dodge like this normally.
 
  • Informative
  • Like
  • Thunk-Provoking
Reactions: Autistic Joe, supremeautismo, HackerX and 9 others
Here's a decrypted string dump of a.class:

Code: 
SELECT origin_url, username_value, password_value FROM logins
file_roots
FILE_ROOTS
file_info
aix
path
dQw4w9WgXcQ:
\AppData\Local
PROXY_DEAD
proxy_send
Local State
FILE_INFO
encrypted_key
\discordcanary
os_crypt
209.141.40.241
host_key
FILE_ROOTS
\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\
darwin
chromium_cookie
os.name
KIT_STATE
\Google(x86)\Chrome
user.name
APPDATA
chromium_pass
encrypted_key
origin_url
\Microsoft\Edge
file_list
user.name
\Chromium
mac
kit
SHA-256
PROXY_DEAD
\User Data\Local State
\Epic Privacy Browser
FILE_LIST
.log
C:\Users\
sessions
SESSIONS
username_value
nix
C:\Users\
PASSWORDS
jdbc:sqlite:
encrypted_value
nux
SELECT * FROM cookies
\Google\Chrome
TEMP_LGN_
.ldb
COOKIES
\BraveSoftware\Brave-Browser
\User Data\Default\Login Data
file_download
File
org.sqlite.JDBC
Folder
Local Storage\leveldb
dQw4w9WgXcQ:[^.*\\['(.*)'\\].*$][^"]*
password_value
APPDATA
os_crypt
\discord
BAD
proxy_tunnel
image_capture
KIT_STATE
\User Data\Default\Network\Cookies
TEMP_CKE_
jdbc:sqlite:
\User Data\Local State
\AppData\Local

Still having look at it but it seems to also access some Chrome databases (probably passwords and bookmarks) also seems to make some Win32 API calls.
 
  • Informative
  • Winner
  • Like
Reactions: Flaming Dumpster, Molokroid, Autistic Joe and 27 others
AltisticRight said:
God what is with people in this sektur and revenge porn, and what drives a person to take nude photos of themselves? I don't get it, it'll only be a matter of time until a leak happens. What a disaster.
Click to expand...
Only a matter of time until we get one with Null and one of the four women I've heard him mention specifically.

Chantal, Brittany Venti, Shoeonhead, and the one that's actually a prostitute, SagittariusShawty.

I don't know how I'd handle any of it, outside of lots of internal giggling during the post blitzkrieg, but giggling I would do.
 
  • Like
  • Thunk-Provoking
  • Optimistic
Reactions: Some dude, internet friend, Onni Kalsarikännit and 5 others
Cad an Hell said:
Yup that's malware. Escaped unicode? I'm more used to seeing straight up byte arrays get loaded into memory - this is probably obfuscated more? I've noticed similar escaped sequences in other files.
util > Internal.java
View attachment 4720892

Edit: question for minecraft players - does the minecraft server give you the mods you need on connect? Or does each player have to install the mod pack? Just wondering if there are players out there also popped. Who is the guy that sent these files to Claire?

Edit2: Oh someone said some mods look dodge like this normally.
Click to expand...
those look a bit more respectable because the unicode escapes are unprintable chars.

adding in a decompiler makes it even worse, those are notoriously bad, but they don't generate new files or new directories that aren't present in the source.

JAva compiles down to bytecode for the JVM and you can do all sorts of abusive stuff with that, and many mods operate by having precompiled bytecode that is "injected" into the existing application (in fact, all mods are basically virus-like injected code; the modloader (usually forge or whatever) does the dirty work for you. Some mods use Java ASM to tie even deeper into the game than "normal" mods can: https://asm.ow2.io - JEI may very well be one of them
 
  • Informative
  • Like
Reactions: Wright, Autistic Joe, Vanquished Phoenix and 11 others
IamnottheNSA said:
>tfw chudbuds were the autistic illuminati this entire time
OK, but really, this entire thing feels like a repeat of SoK. Claire now pulled a Fred Fuchs and disappeared into the aether. Let's see if it sticks.
Click to expand...
Except Fred Fuchs took money to build a well to "prove" he's better than DSP.
While Claire took the money for herself and only shat out more trailer trash kids to prove she's better than Ralph.
 
  • Agree
  • Like
  • Mad at the Internet
Reactions: Autistic Joe, That Other Dude's Persona, Ragnarlodbrok and 8 others
byuu said:
While Claire took the money for herself and only shat out more trailer trash kids to prove she's better than Ralph.
Click to expand...
i mean basically on every metrik she's winning
  • more kids
  • kids apparently don't scream when near her
  • not as fat
  • not as drugged
  • can actually play games on stream
  • has a bigger dick
  • understands the concept of "the goyem know, shut it down"
  • not in mejico
  • doesn't have a horse
  • not yet a felon
  • alive at 40
babaisyou said:
Still having look at it but it seems to also access some Chrome databases (probably passwords and bookmarks) also seems to make some Win32 API calls.
Click to expand...
that's it that's the goddamn smoking gun
100% confirmed hacked in minecraft holyshit memes are real
 
  • Like
  • Winner
  • Agree
Reactions: Pimozide, Autistic Joe, supremeautismo and 36 others
reptile baht spaniard rid said:
i mean basically on every metrik she's winning
  • more kids
  • kids apparently don't scream when near her
  • not as fat
  • not as drugged
  • can actually play games on stream
  • has a bigger dick
  • understands the concept of "the goyem know, shut it down"
  • not in mejico
  • doesn't have a horse
  • not yet a felon
  • alive at 40
Click to expand...
Smaller and fewer tits, though.
 
  • Like
  • Feels
  • Agree
Reactions: marisa #, Pimozide, Autistic Joe and 58 others
reptile baht spaniard rid said:
i mean basically on every metrik she's winning
  • more kids
  • kids apparently don't scream when near her
  • not as fat
  • not as drugged
  • can actually play games on stream
  • has a bigger dick
  • understands the concept of "the goyem know, shut it down"
  • not in mejico
  • doesn't have a horse
  • not yet a felon
  • alive at 40
Click to expand...
If you have a need to compare yourself to Ralph, one of the most ridiculous retards on the planet, you already lost.

It's like saying "Look! I'm smarter than this kid with Down's"
 
  • Like
  • Winner
  • Agree
Reactions: Autistic Joe, Rattus Ebrius, not william stenchever and 23 others
You must log in or register to reply here.
Back