Despite that the senpai-agar chat server is centralized and no peer-to-peer connnection is in-used, the protocol it using leaks various information.
This script leverages the exploit of it and gain the access of players' and teams' information.
In order to use this script, you need to have the following preparation:
- Goto http://senpai-agar.online/lwga/.
- Press F12 to open the developer tools.
- Press console.
- Copy the snippet of this repository (snippet.js) and paste it into the console.
- Press Enter
Once you done this, you can start to use the following functions.
// typing this on console and press enter
getTeams();By invoking this function, it lists all existing teams and generates a corresponding team code consists of [A-Z] that penstrate any team chatroom by reversing the hidden chat session's hashed code. Note that the generated code is not an origin code, it could only bypass the chat server.
// typing this on console and press enter
// 1. list all players
getPlayers();
// 2. list specified players (by team name and player name)
getPlayers("先輩");
getPlayers("Profile 1");By invoking this function, it reveals players' IP addresses.
