diff --git a/src/home.lisp b/src/home.lisp
index 2150f6b..4c01685 100644
--- a/src/home.lisp
+++ b/src/home.lisp
@@ -35,7 +35,7 @@
(span () ,(exec-command "for file in ./files/88x31/*; do (file -i \"$file\" | grep -qE 'image/') && echo \"\" || cat \"$file\"; done | shuf")))
(section ()
(h2 () "post arbitrary data to be displayed here")
- "yes, it does sanitize this" (a (:href "/html/albert-hack-1.html") "(No you don't --sanitization tester)") "yes, it does")
+ "yes, it does sanitize this" (a (:href "/html/unnamed-friend-entity-hack-1.html") "(No you don't --sanitization tester)") "yes, it does")
(section (:class "ignore-section")
(form (:action "#" :method "post")
(label (:for "text") "post text:")
diff --git a/src/html/cool-sites.lisp b/src/html/cool-sites.lisp
index e619b49..3886b22 100644
--- a/src/html/cool-sites.lisp
+++ b/src/html/cool-sites.lisp
@@ -60,7 +60,7 @@
(a (:href "http://puppygirl.systems") "puppygirl.systems (stupid idiot who types <hr/>)")
" Semi functional now")
(span ()
- "albert: "
+ "unnamed friend entity: "
(a (:href "https://iso-9995-9.com") "iso-9995-9.com")
" (down? dns issue maybe)")
(span ()
diff --git a/src/html/albert-hack-1.lisp b/src/html/unnamed-friend-entity-hack-1.lisp
similarity index 81%
rename from src/html/albert-hack-1.lisp
rename to src/html/unnamed-friend-entity-hack-1.lisp
index 9c134a7..479188a 100644
--- a/src/html/albert-hack-1.lisp
+++ b/src/html/unnamed-friend-entity-hack-1.lisp
@@ -1,5 +1,5 @@
(defun html ()
- (page "albert" `((section ()
+ (page "unnamed friend entity" `((section ()
(h1 () "a friend hacked its website.")
(p () "but how?"))
(section ()
@@ -8,7 +8,7 @@
this was due to any url beginning with '/html/' being unconditionally put through parse_file(), which generates static content from the embedded bash in the html (see ).
in addition to this, the source code of the server could be attained via a similar method, requesting the path of the file, but with /files/ or /html/ in front of it, followed by %2e%2e.")
(p () "
- albert was able to exploit this by first getting the source code of the webserver via the second method discussed above, examining it, and deducing the first vulnerability mentioned above.
+ unnamed friend entity was able to exploit this by first getting the source code of the webserver via the second method discussed above, examining it, and deducing the first vulnerability mentioned above.
upon discovering the RCE available via the comment untrusted command evaluation, they were able to add an ssh key to this one's server and thus gain a shell.
amazingly, at the same time that they did this, natalie's other friend's girlfriend (appearing in the comments as gexfan) was halfheartedly trying to mess with its site.
- this ended with around 15 messages on discord telling it its site had been hacked, only around two of which were from albert.")))))
+ this ended with around 15 messages on discord telling it its site had been hacked, only around two of which were from unnamed friend entity.")))))