Post #1253018
2026-04-03 18:36 UTC
@dangoodin and this is before even getting into the fact that there are hundreds of thousands of these bots exposed to the internet already, many with zero auth, so you could just take the bot over that way directly, or use the pairing command to pair something you control to the bot so you're not using its web interface to drive it around.
Replies (1)
-
@Viss@mastodon.social 2026-04-03 18:38
@dangoodin at the end of the day, the bot is very literally RCE as a service. you send the bot a message to do something the bot has access to a command line it does what you want (maybe?) it returns the output via the channel youve setup (also maybe?) so at the end of the day any possible way that you can interact with the bot will result in access to having your desired commands run conteptually, openclaw is RCE with a universal adapter glued to the front