Forum

Login to ZARP

View BBCode Back »

memes

BBCode

[confidential]
1. Profile Views

Currently, just pressing F5 on a users profile updates their view count. This can be exploited with a simple AHK script.
 For example: https://pastebin.com/raw/NSex9cQM

I would suggest limiting the number of requests a user can make within a certain amount of time. A limit to the amount of views on a single profile by the same user could also be added to stop this. It's not really that big of an issue, but could be exploited very easily by anyone with any knowledge of anything at all. I managed to get up to 6 views per second using a few lines of ahk code, so this should certainly be fixed.

2. Thank You's

Same thing applies here, although it's a bit harder than pressing F5. I made a script that can thank a post around once every second to test this out. Thanks every post on a thread if you leave it long enough and can be exploited to boost a users thank you count by a large amount pretty quickly. I'd recommend limiting the number of thank you's an account can make within a certain period, especially for newly created accounts (within 2 weeks i'd suggest).

Code to the script is in C# and is a complete mess as i was still new to the language when i made it. You shouldn't need any help figuring it out, but if you do, contact me.

https://www.mediafire.com/file/i4h74gbhetyj810/Thank_you_bot.rar/file

These exploits aren't major in any way, but allow for things that shouldn't be happening. I should also add that https://zarpgaming.com/index.php/forum/profile/57243-ilikesquirrels is the account i used for all of this, so you may delete it or remove all of it's thank you's/views.
 [/confidential]
memes

Forum

A Couple Of Exploits

Time to create page: 0.074 seconds