Cuba
42.1K posts
CREEPZ INVASION PASSES 🕯️🛸 Are #Creepz invasion passes one of the most slept on assets in the Overlord ecosystem? These passes were used to mint the original Creepz genesis but it was mentioned they would have future utility and remained in the experience.
Today is Peter Thiel’s half birthday. He is now 58.5 years old. In 2019, his ROTH IRA was reportedly worth $5 Billion, holding Palantir, Facebook, PayPal, and other assets. In exactly 1 year, he will be able to withdraw his ROTH IRA earnings, tax-free. Legendary investor.
fuck it, whilst im here, one person who likes/shared this and lets every mfer know why creepz are king gets a free lizzzie
fuck it, whilst im here, one person who likes/shared this and lets every mfer know why creepz are king gets a free lizzzie
Hey @creepz Pull your fucking finger out and release the Creepz NFTs from the Playground. It is absolutely ridiculous that you are still holding them. You've lost me thousands of £s in opportunities by not awarding it straight away, a year ago!! The least you can do is give me the creep now so I can sell it and buy a Big Mac Meal. ------------------- Day 28 of posting every day until this Creep is released to my wallet from incarceration in the @creepz playground. 🦎 If you have a Creep trapped in the Playground, let me know which one so I can add them to the prison cell! #FreeTheCreepz #JusticeFor279
Ok so.. they left their CDN exposed. If you ping the domain, you get this ip: 151.101.129.49 It turns out this is a fastly.com IP . I had never heard of fastly but it looked to be something similar to vercel, so I figured maybe they had custom deployment links like vercel does. Tried a few different combos and BINGO: btc.day.global.prod.fastly.net This took me to this: d325bmwzjz2yc7.cloudfront.net That’s their CDN bucket on AWS. They currently have it setup so that any invalid endpoints redirect back to index.html I went on a hunch and figured that they’d probably already have their production app stored somewhere in the CDN ready for deployment I used SECLISTs (github.com/danielmiessler… )and ffuf to try out over 20k different combinations on this URL. After some sleuthing, BINGO!! I found these two files: > live.html > .DS_STORE The important one here that immediately caught my eye was “live.html”. That sounded like a prod deployment. And sure enough, it was! This is what the btc.day site will look like on the day the faucet goes live: d325bmwzjz2yc7.cloudfront.net/live.html d325bmwzjz2yc7.cloudfront.net/bitkey.html It turns out the entire faucet will be revealed to just be a promotion scheme to get you to buy a bitkey and use cash app. There is no faucet - at least in the sense most were expecting.
