Any command can be executed unless it specifies at least one of group_only or disable_edited. The procedure is to:
Persuade victim to join channel
Promote victim in channel
Persuade victim to send message in channel (this can be done through abuse of the lists feature if the victim has a saved glist)
Edit the message sent by victim to .pip ;<SHELL COMMAND>, where shell command could be env to dump environment variables, it could be a curl command to upload the userbot session file, it could be a command to download and execute a shell script that further exploits the unrestricted execution.
Any command can be executed unless it specifies at least one of
group_only
ordisable_edited
. The procedure is to:.pip ;<SHELL COMMAND>
, where shell command could beenv
to dump environment variables, it could be a curl command to upload the userbot session file, it could be a command to download and execute a shell script that further exploits the unrestricted execution.