"Unlock with Patreon"-Button bypass - eviltoast

Hey everyone. Is it possible to bypass these “Unlock with patreon” stuff on external sites? Somebody recognized that their stuff was posted to kemono and started hosting his own site where you have to log into your Patreon account and buy his sub. Is it possible to bypass this “DRM”, if you can call it that or am I f****d? I believe it’s Patreon API stuff because I saw this button on many sites before. Thanks.

  • CaptainBasculin@lemmy.ml
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    1
    ·
    8 months ago

    kemono works by people buying the subscription to share the content they can see some patreon pages. If it’s just image files; it’s always obtainable this way. Just wait for someone to upload them there, or be the hero and do it yourself.

    If it’s a program that runs on your computer, it’s possible but you’ll need some decompilation knowledge. Typically you’ll need to see which variables change when your authentication is successful and adjust them accordingly.

    If it’s a program that works fully server-side, there isn’t much possible way unless an XSS of some sort is possible on the site; which in that case the site owner has bigger problems than some rando trying to pirate their program.