Mirai Kumiko on Nostr: Hello everyone! I hacked Misskey and got all the achievements. Here is a script in ...

Hello everyone! I hacked Misskey and got all the achievements. Here is a script in which you only need to insert the token from the cookies. This script should be executed in the browser on the web page of your instance several times until all achievements are received. The current list of achievements can be found in the Misskey repository at this path packages/frontend/src/utility/achievements.ts.


const token = <token_from_cookies_in_your_browser>;
const achievements = [
'notes1',
'notes10',
'notes100',
'notes500',
'notes1000',
'notes5000',
'notes10000',
'notes20000',
'notes30000',
'notes40000',
'notes50000',
'notes60000',
'notes70000',
'notes80000',
'notes90000',
'notes100000',
'login3',
'login7',
'login15',
'login30',
'login60',
'login100',
'login200',
'login300',
'login400',
'login500',
'login600',
'login700',
'login800',
'login900',
'login1000',
'passedSinceAccountCreated1',
'passedSinceAccountCreated2',
'passedSinceAccountCreated3',
'loggedInOnBirthday',
'loggedInOnNewYearsDay',
'noteClipped1',
'noteFavorited1',
'myNoteFavorited1',
'profileFilled',
'markedAsCat',
'following1',
'following10',
'following50',
'following100',
'following300',
'followers1',
'followers10',
'followers50',
'followers100',
'followers300',
'followers500',
'followers1000',
'collectAchievements30',
'viewAchievements3min',
'iLoveMisskey',
'foundTreasure',
'client30min',
'client60min',
'noteDeletedWithin1min',
'postedAtLateNight',
'postedAt0min0sec',
'selfQuote',
'htl20npm',
'viewInstanceChart',
'outputHelloWorldOnScratchpad',
'open3windows',
'driveFolderCircularReference',
'reactWithoutRead',
'clickedClickHere',
'justPlainLucky',
'setNameToSyuilo',
'cookieClicked',
'brainDiver',
'smashTestNotificationButton',
'tutorialCompleted',
'bubbleGameExplodingHead',
'bubbleGameDoubleExplodingHead'
];

for (const achievement of achievements) {
fetch("/api/i/claim-achievement", {
"method": "POST",
"headers": {
"content-type": "application/json"
},
"body": `{"name": "${achievement}", "i": "${token}"}`
});
}
#hacking #misskey