FREE MC HOSTING | 3.5GB Starting

Status
This thread has been locked.
PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.

DamonOnYT

Director @ liftup.au
Supreme
Feedback score
0
Posts
63
Reactions
12
Resources
0
lmao I got banned because from their discord I called them a scam.
 

Attachments

  • Screen Shot 2019-06-03 at 12.22.59 am.png
    Screen Shot 2019-06-03 at 12.22.59 am.png
    31.2 KB · Views: 22

koko

Js Bot developer
Supreme
Feedback score
0
Posts
18
Reactions
8
Resources
0
A few XSS vectors on their site - I don't think it can be abused unless you sign in on a friends account or something. Will delete once it's resolved.

View attachment 228608
I will be working on it as hard as I can the website was made by a friend that doesn't work for us and my main lang is not PHP. I may pay someone to do it but thanks for telling us what to fix.[DOUBLEPOST=1559494818][/DOUBLEPOST]
lmao I got banned because from their discord I called them a scam.
I have unbanned. Just don't go annoying csgo again xD
 

Tigon Hosting

Feedback score
3
Posts
15
Reactions
13
Resources
0

Harry

Rustacean
Management
Feedback score
10
Posts
1,606
Reactions
876
Resources
0
facepalm

Clearly, you don't know what an XSS attack is - it has nothing to do with inspect element.
Don't have a GIF of it for LimitedNodes, but here's one for Dyno's panel - https://gyazo.com/385dc9dbfb497a6f648e2dcf78721ecf

See if you can replicate that with inspect element... :rofl:

Edit: Better GIF: https://gyazo.com/86b85e516e9e2c3fb192986ec919f1a9
 
Last edited:

Tigon Hosting

Feedback score
3
Posts
15
Reactions
13
Resources
0

Harry

Rustacean
Management
Feedback score
10
Posts
1,606
Reactions
876
Resources
0
Simple - you've used a Chrome addon such as https://chrome.google.com/webstore/...oakhlngfciodnhlhhgnaaelnpjljija/related?hl=en or similar.

Where's, here's how the Dyno XSS works - https://cdn.discordapp.com/attachme...0363039/Screenshot_2019-06-03_at_21.44.46.jpg

It's because they don't correctly sanitize input directly from Discord.

---

Tigon Hosting I love how far you're trying to go to disprove this. I've literally talked with LimitedNode's developer and he said, and I quote 'PHP's echo function is safe'.
 
Last edited:

koko

Js Bot developer
Supreme
Feedback score
0
Posts
18
Reactions
8
Resources
0
Simple - you've used a Chrome addon such as https://chrome.google.com/webstore/...oakhlngfciodnhlhhgnaaelnpjljija/related?hl=en or similar.

Where's, here's how the Dyno XSS works - https://cdn.discordapp.com/attachme...0363039/Screenshot_2019-06-03_at_21.44.46.jpg

It's because they don't correctly sanitize input directly from Discord.

---

Tigon Hosting I love how far you're trying to go to disprove this. I've literally talked with LimitedNode's developer and he said, and I quote 'PHP's echo function is safe'.
how do you know the dev cause i don't have him added as he lied to nathan
 

koko

Js Bot developer
Supreme
Feedback score
0
Posts
18
Reactions
8
Resources
0
We were in a group chat with Nathan and Csgo - can't remember why you weren't added -

-.- I can't be bothered to deal with his host anymore as you know he gave up. if anything the dev who made the website in the first place works for itzawasome soo i never really trusted the guy.
 
Status
This thread has been locked.
Top