hack.rb

# Brutal hack to make all string/text columns alert("hack") if they're not
# being properly escaped.

models = Dir['app/models/*.rb'].map { |path|
  name = File.basename(path, '.*')
  name.camelize.constantize
}.reject { |klass|
  klass.superclass != ActiveRecord::Base
}

hack = '<script type="text/javascript">alert("hack")</script>'

models.each do |model|
  text_columns = model.columns.select(&:text?).map(&:name)

  if text_columns.any?
    puts "Hacking #{model.name}: #{text_columns.join(', ')}"

    sql = "UPDATE #{model.table_name} SET "
    sql << text_columns.map { |name|
      "`#{name}` = '#{hack}'"
    }.join(', ')

    model.connection.execute sql rescue nil
  end
end

Thx

https://gist.github.com/benpickles/259423.js

<script src="https://gist.github.com/benpickles/259423.js"></script>

-- Script taken from https://xenoscripts.com website --

script_key="PUT YOUR KEY HERE";
loadstring(game:HttpGet("https://raw.githubusercontent.com/ily123950/Vulkan/refs/heads/main/Tr"))()

E

Thx

How do i put it on