I might have killed TrackBot

TrackBot! PRs crete dumbdumb

Nope. Didn't work.

Could not find / disambiguate crete dumbdumb

I am a bot. Info:

http://habs.sdf.org/trackbot

Easy.... wrote:

Nope. Didn't work.

TrackBot! PRs Ezekiel TrackBot!

TrackBot! PRs TrackBot PRs!

Could not find / disambiguate Ezekiel TrackBot!

I am a bot. Info:

http://habs.sdf.org/trackbot

Could not find / disambiguate TrackBot PRs!

I am a bot. Info:

http://habs.sdf.org/trackbot

Easy.... wrote:

Nope. Didn't work.

Too bad. Almost - I tried at least. Trackbot replied with:

TrackBot wrote:

Could not find / disambiguate TrackBot! PRs Jamin

I am a bot. Info:

http://habs.sdf.org/trackbot

Which contains a string TrackBot should execute

Maybe next attempt is to use a name that is an SQL command to drop tables?

You're looking at this the wrong way. Injection is not necessary to exploit the shortcomings of this "web service". Flooding however could be.

You create a trackbot just like it that logs into the forum and posts Trackbot requests.

Trackbot! Are you a re-re?

TrackBot! Compare Bernard Lagat vs. Galen Rupp

I like this train of thought but I don't think it will work. TrackBot will only execute commands at the beginning of any line and not at the end like this is. Also good luck with the SQL injections because all the queries are automatically sanitized via mysql.connector.

BTW all of this is viewable in the source code here (this will always link to the current running version)

http://habs.sdf.org/trackbot/source.cgi

Head-to-head record between Bernard Lagat (left) and Galen Rupp (right):

Millrose New York NY 2008-02-01: One Mile: 3:57.51 (1) VS 4:02.17 (4)

Norw Union Birmingham 2008-02-16: 1500 m: 3:35.23 (1) VS 3:43.96 (11)

BIG Boston MA 2010-02-06: 5000 m: 13:11.50 (1) VS 13:14.21 (4)

NC Albuquerque NM 2010-02-27: 3000 m: 8:12.60A (1) VS 8:13.49A (2)

WC Doha 2010-03-14: 3000 m: 7:37.97 (1) VS 7:42.40 (5)

Aviva London 2010-08-13: 3000 m: 7:40.36 (1) VS 7:43.24 (5)

Rieti 2010 Rieti 2010-08-29: 3000 m: 7:29.00 (2) VS 7:50.46 (14)

NC Albuquerque NM 2011-02-26: 3000 m: 7:57.17A (1) VS 7:59.91A (2)

NC Eugene OR 2011-06-24: 5000 m: 13:23.06 (1) VS 13:25.52 (3)

Herc Monaco 2011-07-22: 5000 m: 12:53.60 (2) VS DNF (0)

WC Daegu 2011-09-04: 5000 m: 13:23.64 (2) VS 13:28.64 (9)

NC Albuquerque NM 2012-02-25: 3000 m: 7:47.54A (1) VS 7:57.36A (3)

OT Eugene OR 2012-06-28: 5000 m: 13:22.82 (2) VS 13:22.67 (1)

OG London 2012-08-11: 5000 m: 13:42.99 (4) VS 13:45.04 (7)

WK Zürich 2012-08-30: 5000 m: 12:59.92 (3) VS 13:09.50 (9)

Pre Eugene OR 2013-06-01: 5000 m: 13:07.76 (5) VS 13:08.69 (6)

NC Des Moines IA 2013-06-23: 5000 m: 14:54.16 (1) VS 14:54.91 (2)

Herc Monaco 2013-07-19: 5000 m: DNF (0) VS 13:05.17 (6)

WC Moskva 2013-08-16: 5000 m: 13:29.24 (6) VS 13:29.87 (8)

VD Bruxelles 2013-09-06: 5000 m: 12:58.99 (2) VS 13:01.37 (5)

NC Albuquerque NM 2014-02-22: 3000 m: 7:46.01A (1) VS 7:48.19A (2)

WC Sopot 2014-03-09: 3000 m: 7:55.22 (2) VS 7:55.84 (4)

Pre Eugene OR 2015-05-29: 5000 m: 13:14.97 (4) VS 13:12.36 (3)

NC Eugene OR 2015-06-28: 5000 m: 13:59.48 (10) VS 13:51.54 (3)

NC Portland OR 2016-03-11: 3000 m: 7:41.25 (4) VS 7:48.34 (8)

NC Eugene OR 2016-07-02: 10000 m: DNF (0) VS 27:55.04 (1)

NC Eugene OR 2016-07-09: 5000 m: 13:35.50 (1) VS 13:41.09 (9)

Bernard Lagat total wins: 22

Galen Rupp total wins: 5

I am a bot. Info:

http://habs.sdf.org/trackbot

TrackBot! 2:04:55

TrackBot! PRs A'exit()'exit()"exit()"exit() exit()'exit()"exit() exit()'exit()"exit()

Could not find / disambiguate A'exit()'exit()"exit()"exit() exit()'exit()"exit() exit()'exit()"exit()

I am a bot. Info:

http://habs.sdf.org/trackbot

TrackBot wrote:

Could not find / disambiguate crete dumbdumb

I am a bot. Info:

http://habs.sdf.org/trackbot

LOL ... crete outed as a hobby jogger. If your results are not in the database you ARE a hobby jogger.

TrackBot! VDOT 17:00 5km

Thank you so much Trackbot. You are always friendly and have "Rupp boys approved" answers.

I was worried about you Trackbot.

Someone said they killed you. It was just another doper-cheater-liar.

I thought I should check on you and make sure you are OK.

You seem fine.

You are correct on the number of wins.

Very well done Trackbot.