Top #hack dweets

function u(t) {

c.width=1920 // clear the canvas
for(i=0;i<9;i++)
x.fillRect(400+i*100+S(t)*300,400,50,200) // draw 50x200 rects

} // 122/140

Please log in (or register) to post a dweet (copy-paste the code somewhere safe to save it meanwhile)


    u(t) is called 60 times per second.
    t: Elapsed time in seconds.
    S: Shorthand for Math.sin.
    C: Shorthand for Math.cos.
    T: Shorthand for Math.tan.
    R: Function that generates rgba-strings, usage ex.: R(255, 255, 255, 0.5)
    c: A 1920x1080 canvas.
    x: A 2D context for that canvas.

Try the new frontend: beta.dwitter.net
Current theme challenge: #ScaryMovies

show FPS hide FPS share fullscreen

tomxor

function u(t) {

t>1&&eval('U='+parent[c.style=9*u.r|reset()].u);U(t);if(t%1>.8)for(c.width=128,i=1e4;i--;)x.fillRect(i&127,0|i/120-t*4,1,u.r=Math.random())

Mar 13 2020 1:15 AM UTC

}// 139/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

Dwitter Vision

Show more comments…
u/Xen

love the idea
u/DaSpider

ReferenceError: U is not defined
u/KilledByAPixel

how is this possible?
u/tomxor

All loaded iframes are enumerated on the window object (for any webpage), the value is the window object of the corresponding frame... and from inside a dweet this can be accessed (with restrictions) by going to the parent frame, then you have access to any globals in that other frame. While you can't call a function since it's in a different JS context, you can read it's source and re-evaluate it.
u/tomxor

essentually window.parent[n].u is the function created by dwitter for dweet n on the page, if you add it to a string it calls toString which returns the source, you can eval this and assign it to something to run in this context.
u/tomxor

I think I am the most verbose person here sorry :/
u/jellyedwards

Wow that's amazing!
u/jellyedwards

Very nice presentation of that little trick
u/katkip

nice trickery. #exploit #trick #hack
u/sigveseb

Woah

show FPS hide FPS share fullscreen

CalSch

function u(t) {

setStatsVisibility(true)
f=Date.now()
c.width=2e3
FPS=S(f/5e3)*20+35
x.font='7em"'
x.fillText(FPS,10,100)

Feb 1 2023 6:03 PM UTC

}// 105/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

FPS sine wave #waitforit

u/magna

Wait... How...
u/magna

#stats
u/magna

I did something similar: d/22257
u/joeytwiddle

This is quite an imaginative #hack from both of you!

show FPS hide FPS share fullscreen

katkip

function u(t) {

/*‮*/eval(atob`dHx8KHM9Ii4iKTtzKz1TdHJpbmcuZnJvbUNoYXJDb2RlKDc4MCtNYXRoLnJhbmRvbSgpKjUwKTt0aHJvdyBz`)

Oct 12 2019 1:26 PM UTC

}// 101/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

show FPS hide FPS share fullscreen

Max1Truc

function u(t) {

throw "(140 / 140)"

Aug 30 2020 12:32 PM UTC

}// 140/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

U+200B

u/aleamb

#hack
u/aleamb

#code
u/DaSpider

a.k.a. zero width spaces

show FPS hide FPS share fullscreen

rodrigo.siqueira

function u(t) {

console.log('%cDWITTER','border-radius:1em;background-color:#000;padding:60px;color:#0f9;font-size:'+S(t*3)**2+'in')

Oct 16 2021 5:42 PM UTC

}// 116/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

Press F12 to view animation on console. #hack

show FPS hide FPS share fullscreen

rodrigo.siqueira

function u(t) {

x.fillStyle=R(x.fillRect(0,0,K=2e3,K*!t),230,x.font="5em monospace")
x.fillText(JSON.stringify(NREUM.loader_config)[frame%54],t*K%K,-~t*94)

Apr 5 2024 8:42 PM UTC

}// 139/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

Bug bounty hacker ransomware #hack

show FPS hide FPS share 1 remix fullscreen

magna

function u(t) {

setStatsVisibility(1)
n=_=>Date.now()
s=d=>{e=n();while(n()-e<d);}
s(1000/((S(t/3)+1)*15+30))

Mar 30 2021 1:25 AM UTC

}// 93/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

Sine in the #stats

show FPS hide FPS share fullscreen

katkip

function u(t) {

/*‫‬‭‮҉*/c.width=1920
/*‫‬‭‮҉*/for(i=0;i<9;i++)
/*‫‬‭‮҉*/x.fillRect(400+i*100+S(t)*300,400,50,200)

Apr 20 2019 1:48 PM UTC

}// 98/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

#default

u/katkip

#hack #exploit
u/katkip

‮҉ #trick

show FPS hide FPS share fullscreen

f8f82804

function u(t) {

//if(t){for(i=1024;i--;)s+=String.fromCharCode(32+Math.random()*65503|0);throw s}else pauseDemo=s='';

Jan 14 2019 6:13 PM UTC

}// 101/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

#unstoppable #unicode typewriter #hack #exploit -- uncomment if you're willing to ruin everything

u/f8f82804

#remix of d/11798
u/f8f82804

according to a report from u/metamero, it will still pause in chrome once you scroll far enough

show FPS hide FPS share 1 remix fullscreen

katkip

function u(t) {

</script>
<script>
window.location.replace("http://www.google.com")
</script>
<script>

May 11 2019 1:47 PM UTC

}// 87/140

Please log in (or register) to post as a new dweet (copy-paste code somewhere safe to save it meanwhile).

Google? Here: https://dweet.dwitter.net/id/13734

u/katkip

#exploit #hack

dwitter.net | #hack