Betacraft

Revision as of 11:59, 16 November 2025 by Free Cliff (talk | contribs) (finish later)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Betacraft is the group behind Uberbukkit, the shitty fork of Poseidon, which is also a shitty fork of CraftBukkit, and obviously the Betacraft Launcher, the Betacraft server, and I can't forget to mention the serverlist.

Moresteck's face probably

Serverlist

Very shitty and XSS-vulnerable serverlist to find griefable servers on. Feel free to manipulate Moresteck into giving you an API key for the serverlist to insert your favorite HTML tags like <script> or <img src="Tubgirl.jpg">. (or just backdoor an existing server and modify their serverlist config)

First XSS & IP Scrape (10/09/2023 - 11/09/2023)

We found out you could add certain HTML tags to serverlist entries. They attempted to block obvious tags like <script> and some others, but they didn't block <img onerror> 😹

People who were accessing the serverlist through their browser were seeing a nice little message and bouncing around their window. It didn't show up on the Betacraft serverlist as it didn't have JS enabled, so we just replaced it with an IP grabber and a crasher. You can get a cleaned version of the IP logs here. (thanks polly)