Discuss Scratch
- Discussion Forums
- » Advanced Topics
- » scratchattach - A Scratch API wrapper | v1.0 released (Python)
- KROKOBIL
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
WHAT?!?!?!? It is really possible! But why hasn't Scratch fixed this big security bug yet?No you don’t, anybody can modify any cloud variableUrgent post!:You can only hack projects / users / cloud variables if you know the password/session id of that user. But if so, it's not scratchattach's fault.
Hopefully people can't use it to hack any cloud project because it said on any project. So I may not use it because of a chance of hacking




Magst du in meinem Studio für deutsche Scratcher mitmachen?
Scrolling Platformer Creator für meine 50 Follower!
- -FreeEngines-
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
how would they fix that in the first place? there is just no way of allowing someone to not modify cloud variables externally (you could, of course emulate all code containing cloud stuff serverside, but that would be quite ressource intensive and probaply wouldnt make much sense)WHAT?!?!?!? It is really possible! But why hasn't Scratch fixed this big security bug yet?No you don’t, anybody can modify any cloud variableUrgent post!:You can only hack projects / users / cloud variables if you know the password/session id of that user. But if so, it's not scratchattach's fault.
Hopefully people can't use it to hack any cloud project because it said on any project. So I may not use it because of a chance of hacking
- silvxrcat
-
500+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
honestly it's the coder to deal with this, maybe generate an access key that allows proper editing. and then when the project detects a cloud variable change and the access key is not valid/there is no access key, it reverts automatically.how would they fix that in the first place? there is just no way of allowing someone to not modify cloud variables externally (you could, of course emulate all code containing cloud stuff serverside, but that would be quite ressource intensive and probaply wouldnt make much sense)WHAT?!?!?!? It is really possible! But why hasn't Scratch fixed this big security bug yet?No you don’t, anybody can modify any cloud variableUrgent post!:You can only hack projects / users / cloud variables if you know the password/session id of that user. But if so, it's not scratchattach's fault.
Hopefully people can't use it to hack any cloud project because it said on any project. So I may not use it because of a chance of hacking
(edit: the programmer codes this)
Last edited by silvxrcat (Jan. 18, 2023 17:50:31)
- MagicCrayon9342
-
1000+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
If you install a terminal and a python interpreter (i doubt you can install either) Is this also available for iPad iOS?
Is ScratchDB down? Find out!
- meatloaf28
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
They have python on iPad iOS.…no? it's python Is this also available for iPad iOS?
I am a writer, at the moment I am working on a novel called -Digits- about a boy named Connor who gets a computer for Christmas but when he try’s to upload something, he gets sucked in along with his neighborhood friends Gabriel and Ellie. They have to try and get out by beating every game on the computer. But, his two extremely mean little brothers make it worse than it originally was.
I also own a collab called chainimals if you want to join, I’m a big fan of sonic the hedgehog, and I love memes.
AMOGUS
- ScratchCatHELLO
-
1000+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
If you install a terminal and a python interpreter (i doubt you can install either) Is this also available for iPad iOS?
sure you can.


ScratchCatHELLO
I have 5600+ posts, I've been on scratch for 5 1/2 years, I'm a Forum Helper™ and I have a Scratch Wiki account!
I like: Python, CSS, Javascript, Rust
Python 3 Text Adventure
cool new browser game - cursed laughing-crying emoji - Illuminati - you know waterbenders, but do you know stock-imagebenders? - snek - vibin' - Bump song (vevo) - Speed bump - yee - fred - m i c k e y
- MagicCrayon9342
-
1000+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
Is ScratchDB down? Find out!
- -FreeEngines-
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
but what prevents an attacker frmo just generating such an accesss key aswellhonestly it's the coder to deal with this, maybe generate an access key that allows proper editing. and then when the project detects a cloud variable change and the access key is not valid/there is no access key, it reverts automatically.how would they fix that in the first place? there is just no way of allowing someone to not modify cloud variables externally (you could, of course emulate all code containing cloud stuff serverside, but that would be quite ressource intensive and probaply wouldnt make much sense)WHAT?!?!?!? It is really possible! But why hasn't Scratch fixed this big security bug yet?No you don’t, anybody can modify any cloud variableUrgent post!:You can only hack projects / users / cloud variables if you know the password/session id of that user. But if so, it's not scratchattach's fault.
Hopefully people can't use it to hack any cloud project because it said on any project. So I may not use it because of a chance of hacking
(edit: the programmer codes this)
- -FreeEngines-
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
on samsung you can install termux which is essentially a linux terminal emulator that can do anything that your linux terminal could do, but again, not for ipadsIf you install a terminal and a python interpreter (i doubt you can install either) Is this also available for iPad iOS?
- DifferentDance8
-
1000+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
for ipads, there's iSHon samsung you can install termux which is essentially a linux terminal emulator that can do anything that your linux terminal could do, but again, not for ipadsIf you install a terminal and a python interpreter (i doubt you can install either) Is this also available for iPad iOS?
One has learnt YmysyloOne's speech pattern and will include it in One's posts occasionally. Do not be afraid about this decision.

For reference:
[quote=MagicCrayon9342]make the thing before announcing it[/quote]
- MonkeyBean2
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
Yeah, once I connected griffpatch's MMO platformer to a remix of mineYes, you can connect to multiple projects Hi! This may be a dumb question but can we connect to the cloud of multiple projects at the same time in a single python program? Or how about the scratch cloud and the turbowarp cloud?
Thank you for your help
- Knightbot63
-
1000+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
You have to use session id's instead of the password due to Scratch's Replit ban. ??????
https://replit.com/@Erti36/Test-Scratch#main.py
This is a Signature, I am allowed to advertise or put whatever is appropriate.
Good Song
Check out my website if you could!
Fun Fact: If you follow me when reading this, you get good luck for the rest of your life!
See my shop!
Cheats, Coming Soon for Stickman Quest(Useful):
C&MBLECTRL
X&RVSE
Must be in the Name Enter Screen
- Erti36
-
13 posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
It turns out that you can't Replit?????You have to use session id's instead of the password due to Scratch's Replit ban. ??????
https://replit.com/@Erti36/Test-Scratch#main.py
i write through a translator if anything……
Last edited by Erti36 (Jan. 19, 2023 15:28:14)
- Knightbot63
-
1000+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
You can still use replit but the only things that work are getting things and setting cloud variables. It turns out that you can't Replit?????
Also, you can get your session ID from the lock where the cookies are.
This is a Signature, I am allowed to advertise or put whatever is appropriate.
Good Song
Check out my website if you could!
Fun Fact: If you follow me when reading this, you get good luck for the rest of your life!
See my shop!
Cheats, Coming Soon for Stickman Quest(Useful):
C&MBLECTRL
X&RVSE
Must be in the Name Enter Screen
- MonkeyBean2
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
Scratch has blocked replit from accessing scratch, with the exception of clouddata.scratch.mit.eduYou can still use replit but the only things that work are getting things and setting cloud variables. It turns out that you can't Replit?????
Also, you can get your session ID from the lock where the cookies are.
- Knightbot63
-
1000+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
Scratch has blocked replit from accessing scratch, with the exception of clouddata.scratch.mit.edukk
~~~
Error? Here's the code:
import os import scratchattach as scratch3 from replit import db Session = os.environ["sessionID"] session = scratch3.Session(Session, username="Knightbot63") conn = scratch3.TwCloudConnection("790734555") client = scratch3.TwCloudRequests(conn) ...Code... @client.event def on_request(request): print("Received request", request.name, request.requester, request.arguments, request.timestamp, request.id) @client.event def on_unknown_request(request): print("Received unknown request", request.name, request.requester, request.arguments, request.timestamp, request.id) @client.event def on_error(request, e): print("Request: ", request.name, request.requester, request.arguments, request.timestamp, request.id) print("Error that occured: ", e) def start(): client.run()
Traceback (most recent call last): File "main.py", line 1, in <module> from attach import start File "/home/runner/CatBits-Server/attach.py", line 8, in <module> conn = scratch3.TwCloudConnection("790734555") TypeError: __init__() takes 1 positional argument but 2 were given
This is a Signature, I am allowed to advertise or put whatever is appropriate.
Good Song
Check out my website if you could!
Fun Fact: If you follow me when reading this, you get good luck for the rest of your life!
See my shop!
Cheats, Coming Soon for Stickman Quest(Useful):
C&MBLECTRL
X&RVSE
Must be in the Name Enter Screen
- Mast_Scratch
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
Scratch has blocked replit from accessing scratch, with the exception of clouddata.scratch.mit.edukk
~~~
Error? Here's the code:Then, it gives me:import os import scratchattach as scratch3 from replit import db Session = os.environ["sessionID"] session = scratch3.Session(Session, username="Knightbot63") conn = scratch3.TwCloudConnection("790734555") client = scratch3.TwCloudRequests(conn) ...Code... @client.event def on_request(request): print("Received request", request.name, request.requester, request.arguments, request.timestamp, request.id) @client.event def on_unknown_request(request): print("Received unknown request", request.name, request.requester, request.arguments, request.timestamp, request.id) @client.event def on_error(request, e): print("Request: ", request.name, request.requester, request.arguments, request.timestamp, request.id) print("Error that occured: ", e) def start(): client.run()Traceback (most recent call last): File "main.py", line 1, in <module> from attach import start File "/home/runner/CatBits-Server/attach.py", line 8, in <module> conn = scratch3.TwCloudConnection("790734555") TypeError: __init__() takes 1 positional argument but 2 were given
the code's different and the error is different as well, error says from attach import start, but in code I can't find it…


- wvzack
-
100+ posts
scratchattach - A Scratch API wrapper | v1.0 released (Python)
i am writing this code into the python thing
import osi get this error
os.system(“pip install -U scratchattach”)
1
import scratchattach as scratch3
Traceback (most recent call last):i have no idea why this script is not working i got no error when i download it so why wont this work
File “<pyshell#9>”, line 1, in <module>
import scratchattach
ModuleNotFoundError: No module named ‘scratchattach’