• There is NO official Otland's Discord server and NO official Otland's server list. The Otland's Staff does not manage any Discord server or server list. Moderators or administrator of any Discord server or server lists have NO connection to the Otland's Staff. Do not get scammed!
  • 2026 staff recruitment is open! Check it out and consider applying!

CodexAAC

Joined
Oct 4, 2017
Messages
15
Reaction score
8

Attachments

Last edited by a moderator:
Interesting, any place to check it out ?
 
Interesting, any place to check it out ?
I tried to run it on VPS.
Frontend prod build fails (error in .tsx). Frontend dev works.
Backend prod/dev starts.
It's compatible only with Canary database structure. I tried TFS 1.4 and it cannot create account.

You can create similar AAC using Codex ( https://openai.com/pl-PL/codex/ ).
It's easy to make sites like that with AI. Anyone can make similar site in few hours/days and put backdoor in it :(

You can check how it looks/works (dev frontend):
but I will probably turn off that VPS tomorrow, as it's unusable and there are no new commits in last 2 weeks.

When you create account, you are logged to that account and you can create character, but after logout, you cannot login again. It shows Internal server error on /login and that's all.

It looks like this:
1766004303119.webp

There are some small errors like level % calculation (should be 0%):
1766005514767.webp


EDIT:
FRONTEND CRASHED :D
Maybe it's related to 'dev mode', but each page refresh increases RAM usage by node by 2-5 MB. My server has 4 GB RAM.
'prod mode' of frontend does not work. I tried to fix reported bugs, but after every fix, I start 'build' and it reports another.
I added auto-restarter, so it will restart node after crash.
 
Last edited:
Update. My server in Hetzner with this AAC was blocked by datacenter for scanning other server on Saturday:
Code:
scansnarf-ng detected Netscan from 37.27.190.169

2025-12-20 03:51:32  37.27.190.169 35980 ->     31.57.254.0  3306   74 TCP
2025-12-20 03:51:33  37.27.190.169 35980 ->     31.57.254.0  3306   74 TCP
2025-12-20 03:51:34  37.27.190.169 35980 ->     31.57.254.0  3306   74 TCP
2025-12-20 03:51:32  37.27.190.169 23714 ->     31.57.254.0  3389   74 TCP
2025-12-20 03:51:33  37.27.190.169 23714 ->     31.57.254.0  3389   74 TCP
All I installed on that machine was MariaDB and this AAC. SSH had only access by SSH key + fail2ban installed, so it was not some random 'weak SSH password scan'.
Install that AAC, wait 3 days and your server will DDoS other servers :(

EDIT:
I've talked with author of that AAC on Discord. He said that nextJS/react had some bug fixed ( React2Shell (CVE-2025-55182): Critical React Vulnerability | Wiz Blog (https://www.wiz.io/blog/critical-vulnerability-in-react-cve-2025-55182) ):
Code:
The project is still using version 15.x, so the command must be executed manually.
You must run this command on the frontend, and it will resolve this issue.
npm install next@latest react@latest react-dom@latest
 
Last edited:
Back
Top