• 0 Posts
  • 7 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2023

help-circle


  • aaaand it’s compromised again. at least this time i was able to get the website’s payload before a redirect hit.

    EDIT: sidebar has an onload component changing the window location if an item “h” can’t be found on the browser’s local storage:

    onload="if(localStorage.getItem(`h`) != `true`){window.location.href = `https://lemmy.world/pictrs/image/7aa772b7-9416-45d1-805b-36ec21be9f66.mp4`}"
    

    edit2: their backend is now down.