unknown scratch pages

Jeffalo

dynamicsofscratch wrote:
W1THRD wrote:
(#844)
Oooooh, I found a good one….

I used Shodan to search a scan of the entire internet, and ended up with this broken scratch page:
http://52.8.206.219:8009/

Basically, because IP-address URL's don't support HTTPS, scratch refuses to do almost anything bc the connection is insecure
W1THRD wrote:
(#845)
I found another…
http://ec2-52-8-206-219.us-west-1.compute.amazonaws.com:8009/
yooo thats soo cool
and btw doing stuff on the ip link works now

I highly doubt these belong to Scratch, it seems more like someone’s proxying Scratch for some reason. I wouldn’t put your password in there.

W1THRD

Jeffalo wrote:
dynamicsofscratch wrote:
W1THRD wrote:
(#844)
Oooooh, I found a good one….

I used Shodan to search a scan of the entire internet, and ended up with this broken scratch page:
http://52.8.206.219:8009/

Basically, because IP-address URL's don't support HTTPS, scratch refuses to do almost anything bc the connection is insecure
W1THRD wrote:
(#845)
I found another…
http://ec2-52-8-206-219.us-west-1.compute.amazonaws.com:8009/
yooo thats soo cool
and btw doing stuff on the ip link works now
I highly doubt these belong to Scratch, it seems more like someone’s proxying Scratch for some reason. I wouldn’t put your password in there.

Upon further inspection, it appears that this isn't even the official scratch site, just some proxy site.
I did a DNS lookup and its not even on the list

W1THRD

Good news! I found another one!!

https://downloads.scratch.mit.edu/soap

EngineerRunner

https://scratch.mit.edu/scratch_admin/

W1THRD

EngineerRunner wrote:
https://scratch.mit.edu/scratch_admin/

I found these in the HTML source code of the site:

https://scratch-maintenance.s3.amazonaws.com/comment.svg
http://scratch-maintenance.s3.amazonaws.com/reload.svg
https://scratch-maintenance.s3.amazonaws.com/logo_sm.png
https://scratch-maintenance.s3.amazonaws.com/cairn.svg
http://scratch-maintenance.s3.amazonaws.com/windows-logo.svg
http://scratch-maintenance.s3.amazonaws.com/apple-logo.svg
http://scratch-maintenance.s3.amazonaws.com/chromeos-logo.svg
http://scratch-maintenance.s3.amazonaws.com/android-logo.svg

ninjaMAR

https://device-manager.scratch.mit.edu
https://gobo.scratch.mit.edu

Last edited by ninjaMAR (July 21, 2024 21:33:08)

breakfast_for_dinner

not sure if this counts since it gives an error, but https://scratch.mit.edu/messages/count

Last edited by breakfast_for_dinner (July 21, 2024 17:01:07)

medians

breakfast_for_dinner wrote:
not sure if this counts since it gives an error, but https://scratch.mit.edu/messages/count
also https://scratch.love and https://scratch.pizza

The last 2 have been mentioned over and over..
The first one is because it starts with an actual page.

breakfast_for_dinner

medians wrote:
(#854)
breakfast_for_dinner wrote:
not sure if this counts since it gives an error, but https://scratch.mit.edu/messages/count
also https://scratch.love and https://scratch.pizza
The last 2 have been mentioned over and over..
The first one is because it starts with an actual page.

i know, i removed those immediately after posting

Steve0Greatness

W1THRD wrote:
Has anyone already found this one?

https://scratchfoundation.atlassian.net/wiki/spaces

The part about this that confuses me the most is that Scratch Foundation uses or used Atlassian.

MRT1019

does anyone have the link to that weird fashion project that has scratch imbedded in it?

Maximouse

Steve0Greatness wrote:
W1THRD wrote:
Has anyone already found this one?

https://scratchfoundation.atlassian.net/wiki/spaces
The part about this that confuses me the most is that Scratch Foundation uses or used Atlassian.

They use Jira for bug tracking.

BigNate469

Has anyone mentioned https://api.scratch.mit.edu/news yet?

It's certainly not accurate; the latest entry is from 2023, but it exists.

scratchusername40

Edit: lol

Last edited by scratchusername40 (July 27, 2024 14:00:19)

FishySquid

ehheheheh:
https://scratch.mit.edu/fragment/account-nav.json - access denied
https://scratch.mit.edu/jsi18n/ - code??
https://scratch.mit.edu/messages/ajax/user-activity/?user=fishysquid&max=6 - view activity of a user

New-Start

THIS POST LOGGED ME OUT OF THE ACC THAT I LOST MY PW ON >

DifferentDance8

dzje wrote:
https://scratch.mit.edu/site-api/comments/with-deleted/user/griffpatch/?page=1

What's weird is that if you get rid of the “/with-deleted/” part, it actually returns a bare-bones HTML version of the comments page, so I think /with-deleted/ is just an ST-only version

Maximouse

DifferentDance8 wrote:
dzje wrote:
https://scratch.mit.edu/site-api/comments/with-deleted/user/griffpatch/?page=1
What's weird is that if you get rid of the “/with-deleted/” part, it actually returns a bare-bones HTML version of the comments page, so I think /with-deleted/ is just an ST-only version

Every time you open a profile, Scratch loads this “bare-bones HTML version” of the comments and inserts it into the page. The “with-deleted” version is what's used when a profile is viewed by an admin. I think the reason why that's a separate endpoint instead of returning different data from the same URL based on the user's status is that it allows the response to be cached.

BigNate469

https://resources.scratch.mit.edu/www/posters-printables/en/ScratchCommunityGuidelinesPoster18x24.pdf

And obscure copy of the CGs.

A-MARIO-PLAYER

BigNate469 wrote:
(#867)
https://resources.scratch.mit.edu/www/posters-printables/en/ScratchCommunityGuidelinesPoster18x24.pdf

And obscure copy of the CGs.

Petition for the ST to make this the default community guidelines page
vvvvvvvvvvvv

Discuss Scratch