- Joined
- Dec 13, 2022
admin.php and lib/admin.php... names are hard.View attachment 7225437
For easy access, incase you don't want the code on your computer, or whatever reason, I have uploaded the 4chan source code to https://git.slowb.ro/AgarthaCrack/4ChanSourceCode
Shit yeah basically all the keys are here, their captcha shit, cloudflare auth header shit, reverse dns signing, and this is just me perusing a little.
As some other poster said, some funky manual SQL with string interpolation action is definitely going on.
The worrying bit for me is when you see them building command strings to pass to exec with what looks like a suid wrapper. Nice.