CURRENT MISSION: Conclude the 2026 soyjak.party hack page, aswell as any pages relating to it, such as the Summer 2026 Crisis page.
Update Quotecord with any relevant info. See the blackboard for more info.
2026 soyjak.party hack: Difference between revisions
→What's included: remove retarderalds Tag: 2017 source edit |
No edit summary |
||
| Line 1: | Line 1: | ||
{{Ongoing}} | {{Ongoing}} | ||
{{WIP}} | {{WIP}} | ||
{{CustomQuote|file=[[File:41010 - SoyBooru.png||link=Twitter immigrant| | |||
{{CustomQuote|file=[[File:41010 - SoyBooru.png||link=Twitter immigrant|30px]]|1=dull reactions, nothing ever happens...}} | |||
{{Infobox event|partof=the [[Second Great Handover]]|image=File:2026_hack_1.png|type=Hack|date=August 5th, 2026|place=The entire Soysphere|result=* All sites go down for 4 days.|cause=RCE in Quote's MPA. Can also be considered | |||
On August 11, 2026, at 6:11 AM UTC, a [[Kiwi Farms]] user under the name of Zhambyl Tulegbenpenov would make the claim that the reason behind the [[2026 outage]] and subsequent [[Second Great Handover]], was because the Sharty was hacked and had | {{Infobox event| | ||
== Pre- | partof=the [[Second Great Handover]]| | ||
The hack was allegedly done by a Soycord, in which it likely spread around after to other groups and eventually got to Zhambyl. The source code was then kept secret and Quote blamed the downtime on [[Lie|Cloudflare or | image=File:2026_hack_1.png| | ||
== Reaction == | type=Hack|date=August 5th, 2026| | ||
Reactions have been quite dull to this as of writing (07:00, 11 August 2026 (UTC) | place=The entire Soysphere| | ||
== What's included == | result=* All sites go down for 4 days.| | ||
cause=RCE in Quote's MPA. Can also be considered a DDoS attack}} | |||
On August 11, 2026, at 6:11 AM UTC, a [[Kiwi Farms]] user under the name of Zhambyl Tulegbenpenov would make the claim that the reason behind the [[2026 outage]] and subsequent [[Second Great Handover]], was because the Sharty was hacked and had its source code stolen.<ref>https://megalodon.jp/2026-0812-0013-44/https://kiwifarms.st:443/threads/soyjak-party-the-sharty.145349/post-25216920</ref> In his post, he stated that he hated niggers, trannies, and Jews and then linked the leak in a gofile link. The link contains a 2.6GB file named "vichan.zip" which contains the Sharty's [[Vichan]] fork along with some Telegram channel export. Later that day at 3:02 PM UTC, another Kiwi Farms user under the name [[Trooncore (musical genre)|Femtanyl]] (who was also responsible for the 'ru source code leak) later confirmed that the hack was done by a Soycord by failtrolls and that the exploit was on Quote's [[MPA]] system.<ref>https://megalodon.jp/2026-0812-0009-09/https://kiwifarms.st:443/threads/soyjak-party-the-sharty.145349/page-5691</ref> | |||
==Pre-leak== | |||
The hack was allegedly done by a Soycord, in which it likely spread around after to other groups and eventually got to Zhambyl. The source code was then kept secret and Quote blamed the downtime on [[Lie|Cloudflare or disk issues]]. | |||
==Reaction== | |||
Reactions have been quite dull to this as of writing (07:00, 11 August 2026 (UTC) - likely due to the late time this was posted for many, and the fact that it's been too little time for anyone to realize the extent of how bad this can be. | |||
==What's included== | |||
* [[McChallenge]] (found in "<code><nowiki>js/captcha/static</nowiki></code>") | * [[McChallenge]] (found in "<code><nowiki>js/captcha/static</nowiki></code>") | ||
* Secure tripcode salt{{Note|The salt is <code><nowiki>OSSL.4lNNPl85dg+m5OmYnDRgy4XmRZYmXYV7wN+1Pwkb9mjGZ8mmyHvoUZVXQvCvrl4FGKVIyWqhpQJu55N4RcW/rZd3wYABmCwd4hENkvQNUWD9d6Zc/k54LUn4q3yqj8ffHGokSh+yUnc/qhusSd/IzVbyBWjVkWmM6+Uf86uPHKU=</nowiki></code>}} | * Secure tripcode salt{{Note|The salt is <code><nowiki>OSSL.4lNNPl85dg+m5OmYnDRgy4XmRZYmXYV7wN+1Pwkb9mjGZ8mmyHvoUZVXQvCvrl4FGKVIyWqhpQJu55N4RcW/rZd3wYABmCwd4hENkvQNUWD9d6Zc/k54LUn4q3yqj8ffHGokSh+yUnc/qhusSd/IzVbyBWjVkWmM6+Uf86uPHKU=</nowiki></code>}} | ||
| Line 20: | Line 31: | ||
Suspiciously, [[integrity.js]] is nowhere to be found in this leak, despite being linked to multiple times. {{Frogtext|Nusoi.. it wouldn't work either way integrity's changed}} | Suspiciously, [[integrity.js]] is nowhere to be found in this leak, despite being linked to multiple times. {{Frogtext|Nusoi.. it wouldn't work either way integrity's changed}} | ||
== Download == | ==Download== | ||
You either have Gofile, Magnet or Torrent. | You either have Gofile, Magnet or Torrent. | ||
{{Notelist}} | {{Notelist}} | ||
{{Reflist}} | {{Reflist}} | ||
{{Shut it down}} | {{Shut it down}} | ||
Revision as of 15:51, 11 August 2026

Check again later for more coverage.


On August 11, 2026, at 6:11 AM UTC, a Kiwi Farms user under the name of Zhambyl Tulegbenpenov would make the claim that the reason behind the 2026 outage and subsequent Second Great Handover, was because the Sharty was hacked and had its source code stolen.[1] In his post, he stated that he hated niggers, trannies, and Jews and then linked the leak in a gofile link. The link contains a 2.6GB file named "vichan.zip" which contains the Sharty's Vichan fork along with some Telegram channel export. Later that day at 3:02 PM UTC, another Kiwi Farms user under the name Femtanyl (who was also responsible for the 'ru source code leak) later confirmed that the hack was done by a Soycord by failtrolls and that the exploit was on Quote's MPA system.[2]
Pre-leak
The hack was allegedly done by a Soycord, in which it likely spread around after to other groups and eventually got to Zhambyl. The source code was then kept secret and Quote blamed the downtime on Cloudflare or disk issues.
Reaction
Reactions have been quite dull to this as of writing (07:00, 11 August 2026 (UTC) - likely due to the late time this was posted for many, and the fact that it's been too little time for anyone to realize the extent of how bad this can be.
What's included
- McChallenge (found in "
js/captcha/static") - Secure tripcode salt[a]
- Banned user agents
- Source code for the 2026 April Fools frontend (found in "
frontend") - Moderation guidelines and a bunch of janny shit
- Discord webhooks
- Hardcoded integrity bans

- (hashed) Admin password
Suspiciously, integrity.js is nowhere to be found in this leak, despite being linked to multiple times. Nusoi.. it wouldn't work either way integrity's changed 
Download
You either have Gofile, Magnet or Torrent.
Notes
- ↑ The salt is
OSSL.4lNNPl85dg+m5OmYnDRgy4XmRZYmXYV7wN+1Pwkb9mjGZ8mmyHvoUZVXQvCvrl4FGKVIyWqhpQJu55N4RcW/rZd3wYABmCwd4hENkvQNUWD9d6Zc/k54LUn4q3yqj8ffHGokSh+yUnc/qhusSd/IzVbyBWjVkWmM6+Uf86uPHKU=

