Advertisement
Advertisement
/p/ - Ponies
Ponies
[Return]
Posting mode: Reply
Name
Email
Subject
Comment
File 1
Tags 1
Password (for post and file deletion)
Extra [ Is Spoiler ]
  • Supported file types are: jpg,jpeg,png,gif,swf,mp3
  • Maximum file size allowed is 20mb.
File: ddlarge_u18chan.png - (672.47kb, 842x1024, ddlarge.png) Thumbnail displayed, click image for full size.
Alcor's patreon art Anonymous 2021/06/13 11:03:11 No.1962993   
Add Tag
So he has stuff behind paywall... Kemono doesn't have it either
Expand All Images
>>
Traitor 2021/06/13 17:47:43 No.1963122
Add Tag
Make an account on his website https://alcorart.com/ and then use this code to get access to all his art.

Platinum Code: F1HVGTD2AS
>>
Anonymous 2021/06/18 09:41:05 No.1965522
Add Tag
It's also a wordpress site so you don't even really need that. Just start with the banner.
>>
Anonymous 2021/07/01 18:24:34 No.1972462
Add Tag
Anybody has the platinum code for this month?
>>
Traitor 2021/07/05 12:26:14 No.1974642
Add Tag
Platinum Code for July: EY1PN6HFRB

Edited at 2021/07/05 12:26:32
>>
Anonymous 2021/07/06 16:47:02 No.1975269
Add Tag
>>1965522
I’m computer illiterate. What do you mean?
>>
Anonymous 2021/07/23 14:17:30 No.1983129
Add Tag
>>1965522
...
For the sake of St. Phuck, don't tell me...

Well, one quick check later, and yeah - pretty much. It opens, and allows downloads. Like, what in the unholy name of Azathoth is that fuckness!..
Fuck, each time I encounter something like that I begin monologuing uncontrollably.
Please tell me that's just a honeypot, and I'm just too dumb to understand complex protective system that hides real content behind it...

>>1975269
He means that all images on the site are stored inside open unprotected structure, and can be accessed with contemptuous triviality.
A somewhat apt comparison would be a vault door with complicated code lock standing in open field completely by its solitary itself. You can enter the code and open it - or you can, yanno... just take a step to the side and walk around, pouch the thing lying behind it, and be on your merry way, carrying away the very thing that door was quote installed to protect unquote.

Fuck...
>>
Anonymous 2021/07/24 02:09:03 No.1983342
Add Tag
you can't just type in the url, so they're doing something right. I don't see anything else in the inspector that would let you bypass the login
>>
Anonymous 2021/07/24 15:57:26 No.1983686
Add Tag
File: cumshot-1_u18chan.png - (10.73mb, 4000x4000, cumshot-1.png)
>>1983342
Old software to the rescue.
With my immense secret powers of Firefox v4X I am able to type in whatever url I godsdamn choose.
Same goes for my Chrome (although it's not that old), et cetera.
I, in fact, wasn't using inspector at all, just editing the url string directly on off-chance it would work. I remember doing that shite about twenty years ago - and some wankers even had a gall to call me 'hacker' after shewing them that; one of the most backhanded compliments in my life - but, most aggravatingly, they were serious about that.
I see, not much has changed from that time.

Like, what the fuck - that hole as a concept should've followed dinosaurs about the time 80386 became extinct in the wild.
Of course, they may orient on recent generations of soft first and foremost, or disregard old and unusual as class - but then old soft should not be able to see the site at all due to absence of back compatibility; and, to boot, optional protection from selected few methods of access is no protection at all.
It's not like such thing doesn't exist - there are plenty of WP sites that just outright refuse to give me access then I do that to them; without passwords, all - and installing content lock is a tad more complicated process than protecting internal structure from unauthorized access through (intentional) typo in url.

Naming scheme for the images is horrible, by the by - though that's neither here nor there.

...
Sorry for wall of text.
<-- Here's a pict as an excuse.
Ah get me coat.
>>
Anonymous 2021/07/25 09:53:47 No.1984040
Add Tag
I’ll be honest, all I’m really interested in is the high-res version of the Rarity/Sweetie Belle comic.
>>
Anonymous 2021/08/04 08:09:00 No.1989200
Add Tag
Platinum Code for August?
>>
Anonymous 2021/08/09 13:55:03 No.1991675
Add Tag
>Anybody has the platinum code for this month?
KB0N9ZOCH6
>>
Anonymous 2021/08/09 15:24:06 No.1991772
Add Tag
>>1991675
Thanks
>>
Anonymous 2021/08/12 02:25:17 No.1992893
Add Tag
File: 3wi81gbm_u18chan.jpg - (172.05kb, 1752x960, 3wi81gbm.jpg)
I will pin to that thread and ask if someone have full res those pictures/pack?
>>
Anonymous 2021/08/17 17:59:09 No.1995886
Add Tag
>url jamming gives out 403 errors now
Well, fuck
>>
Anonymous 2021/08/31 19:33:53 No.2002597
Add Tag
Requesting a code for September please
>>
Anonymous 2021/09/05 17:40:26 No.2005216
Add Tag
File: 23yMwFrWQU_u18chan.png - (289.98kb, 1917x860, 23yMwFrWQU.png)
you all should take a closer look at the thumbnail names in the webconsole. just investigate the thumbnail of a locked picture. if you remove the nrXnr part you can get access to the full pictures. for example "cumshot-1-150x150.png" becomes "cumshot-1.png".
>>
Anonymous 2021/09/05 17:48:29 No.2005221
Add Tag
File: HDsex_0_u18chan.png - (11.1mb, 4000x3333, HDsex.png)
i downloaded this 3 pictures with this method. it was uploaded yesterday.
>>
Anonymous 2021/09/05 17:48:33 No.2005222
Add Tag
File: cumshot-1_1_u18chan.png - (11.02mb, 4000x3333, cumshot-1.png)
>>2005221
>>
Anonymous 2021/09/05 17:49:45 No.2005223
Add Tag
File: aftersex_1_u18chan.png - (6.39mb, 3336x2905, aftersex.png)

>>
Anonymous 2021/09/05 18:38:54 No.2005232
Add Tag
but wait there is more, i even made a tampermonkey script. it basically adds the full data src to the links and then change the style for them to level "free".

https://sharing.rainbowdash.cc/alcor-unlocker.user.js

once added it is basically the same as having entered a monthly key.
only tested with chrome yet. but it will probably also work with firefox and greasemonkey etc.
>>
Anonymous 2021/09/05 23:37:17 No.2005301
Add Tag
>>2005232
Thank G! Time for some archiving
>>
Anonymous 2021/09/11 07:27:24 No.2007585
Add Tag
>>2005232
can’t wait for Alcor to give up and move to Primeleap to make this even easier; I have a full bypass for it that lets me pull unwatermarked originals because lmao spaghetti shitcode. Also, because the goofy ass manual watermark placement scheme is so detectable with some basic comparisons against a public low res image in imagemagick you can automatically generate arbitrary watermark metadata and fuck over random people. On a completely unrelated note, and hilariously, the “leak tracing” decoder panel had multiple xss when you fed it a tampered image, no idea if that ever got patched or if they just tore it down.
>>
Anonymous 2021/10/17 16:56:34 No.2024570
Add Tag
>>2005232
how do you use this?
do you just download it with tappermonkey then go to alcors site?
>>
Anonymous 2021/11/01 12:25:44 No.2031326
Add Tag
>>2024570
yes, download tampermonkey, then just click on the link and use it with tampermonkey. if you then go to the site, everything should be unlocked. btw. there is new content on the alcor website.

Edited at 2021/11/01 12:27:01
>>
Anonymous 2022/06/20 22:18:31 No.2141160
Add Tag
Can someone make a script for the comics too?
>>
Anonymous 2022/11/02 01:19:01 No.2208184
Add Tag
>>2005232
It seems that they finally patched the site where the code exploit doesn't work anymore. It's back to requesting high tier codes.
>>
Anonymous 2022/11/13 04:22:48 No.2212659
Add Tag
>>2208184
Still working for me.

[ File Only] Password


Contact us by by phone toll-free! 1-844-FOX-BUTT (369-2888)

Page generated in 4.44 seconds
U18-Chan

All content posted is responsibility of its respective poster and neither the site nor its staff shall be held responsible or liable in any way shape or form.
Please be aware that this kind of fetish artwork is NOT copyrightable in the hosting country and there for its copyright may not be upheld.
We are NOT obligated to remove content under the Digital Millennium Copyright Act.