i am an internet junkie and a hard drug abuser, do not be like me (really)
Posted on: July 26, 2026
i spend most of my time online, deep in shitholes and, reading forgotten docs, old forums,
and weird corners of the web that most people never see.
everything fascinates me in a way i cannot describe.
at the same time i am a hard drug abuser. that part of my life is fucked up, and i have no one to blame but myself.
i have been addicted to percocet, shrooms, acid for a long time, and it has destroyed my life in ways i cannot even begin to describe.
i have lost opportunities because of my addiction. and my health is fucked.
and i have lost my sense of self. and i am not proud of it.
still, i’m proud of the people around me. ven, ky, slyvia, helped me get through some of the worse stretches more than once,
and the rest of my circle has been solid too. that shit matters more than most things ive interacted to weirdos in the internet.
i’m also trying to get my life in a better place right now. i know its taking slow to progress,
but i am trying. and i am trying to be better. and i am trying to be a better person.
why you should prohibit-password for SSH
Posted on: Mar 15, 2024
pwning the Doubledouble.top / GamesDrive reverse proxy via a leaked root password.
ROOT PASSWORD IN BIO
So I was minding my business playing Warframe when my friend texted me this.
An error message from doubledouble.top,
leaking the root credentials to, something. I thought this was fucking hilarious,
but he had signed in via SSH asking me what to do with it, so of course I took a look.
After a bit of investigating, I had discovered it was a Debian machine running Nginx
Proxy Manager in a Docker container.
I had never used Nginx Proxy Manager before, so I seek the documentation and learn
that in a default configuration it exposes an admin panel at port 81
and stores an SQLite database at the /data volume.
Well, here it is, what now?
Pwnage
Well, let's inspect the SQLite database.
We find an administrator at id 1 and the email gamesdrive@hello.com,
and a bcrypt hash for user_id 1. At first I was confused about the email address,
because it was not known to me that doubledouble.top
and gamesdrive.net were affiliated.
I moved on and realized how I could log in as Admin — just update the bcrypt hash.
I install the sqlite command line in the Docker container and generate a bcrypt hash
with the mkpasswd command on my Linux machine, and a simple sqlite shell
command should do the trick.
UPDATE auth SET secret = "<new_hash>" WHERE id = 1;
And we're in. Now let's go check out those proxy hosts, because 11 is a pretty big number.
Holy shit, those are the IP addresses to about 11 different hosts, including the
homepages for doubledouble.top and
gamesdrive.net. Let's point them somewhere else.
Since I don't have access to the webserver, I decided to make a
Rentry document. But since proxy hosts
configuration doesn't let us point to website subdirectories, we are going to turn
these to redirection hosts. (I don't have a screenshot of this.)
Aftermath
Shortly after I did this, people in the Telegram channel started to notice. I didn't think it would happen so soon.
Five hundred views in the matter of minutes, that's pretty good. An admin opens chat
and admits they've noticed the issue before but didn't know it was a credential leak. lol
After about 20 minutes and 2.6k Rentry views, the owner changed DNS records, reset
everything, and made some Telegram announcements.
I had a talk with Guy Incognito and r82, they weren't too mad.
I'm sure they were annoyed though. We do a little bit of trolling ;)
First Post
Posted on: Feb 21, 2024
I've always been fascinated with small, personal websites.
Most of the web today feels too polished, too corporate — I wanted a
corner that looks and feels like it was coded in a text editor,
because it was.
This site is still a work in progress, but I plan to use it for
experimenting with ideas, writing about random things I'm tinkering with,
and maybe posting some half-broken code along the way.
If you've somehow stumbled here — welcome. Think of this as my digital
notebook, nothing more, nothing less.
