4.9 KiB
4.9 KiB
Discourse Forum Login Reference
Pattern
Discourse-based forums use a simple form login. No CSRF token required for most instances.
Login Endpoint
POST https://<domain>/login
Content-Type: application/x-www-form-urlencoded
username=<username>&password=<password>&redirect=/
⚠️ CRITICAL — Modern Discourse (2026.7.0+) JS-Only Auth
NodeLoc (Discourse 2026.7.0-latest) cannot be verified via Python requests or curl.
- Server sets NO cookies via HTTP headers (no
Set-Cookie). - Both success and failure return
HTTP 302 → /with byte-identical HTML (101,958 bytes). - Only difference:
discourse-track-view-session-idmeta tag (random session ID, not auth). logoutstring is in homepage source even when NOT logged in — false positive.- Auth session is managed entirely via JavaScript-set cookies.
CORRECT — Browser-Only Verification
- Navigate to
/login - Fill username + password, submit
- Success: rendered page shows
"欢迎回来，USERNAME！" - Failure: stays on
/loginwith"Неверное имя пользователя, адрес электронной почты или пароль" - Rate limit: ~17 requests → HTTP 429
FAST PRE-CHECK — User Existence (works with curl!)
# Check if user exists — no auth needed, no rate limit issues
r = requests.get(f'https://www.nodeloc.com/u/{username}', allow_redirects=True)
# 200 + '/u/username' in URL = user exists
# 404 = user does not exist (skip login attempt entirely)
This eliminates ~40% of login attempts instantly (many usernames in dumps are fake).
Session Management
- Logout:
GET /session/logout→ returns 404 page BUT destroys the session cookie. Check header for "Войти" (Login) link. - No CSRF token needed for login form POST.
Public API (no auth required)
# Latest topics
curl -s 'https://www.nodeloc.com/latest.json'
# Topic content
curl -s 'https://www.nodeloc.com/t/{id}.json'
# Search
curl -s 'https://www.nodeloc.com/search.json?q=KEYWORD'
# User profile (404 = user doesn't exist)
curl -s -o /dev/null -w '%{http_code}' 'https://www.nodeloc.com/u/{username}'
Known Discourse Sites (updated 2026-07-22)
Discourse API Accessible (curl works)
| Site | URL | Topics |
|---|---|---|
| NodeLoc | nodeloc.com | 337+ AI abuse topics |
| V2EX | v2ex.com | Custom API (/api/topics/) |
| OpenAI Community | community.openai.com | Jailbreak, bypass, Codex |
| HuggingFace | discuss.huggingface.co | 88 uncensored/jailbreak topics |
| Fly.io | community.fly.io | LLM API abuse |
| NVIDIA Dev | forums.developer.nvidia.com | GPU/AI |
| Docker | forums.docker.com | AI containers |
| Python Discuss | discuss.python.org | LLM/API |
| OpenWrt | forum.openwrt.org | Networking |
| TechPowerUp | techpowerup.com/forums | Hardware/AI |
| Level1Techs | forum.level1techs.com | VPS/AI |
| Ubuntu | discourse.ubuntu.com | Linux |
| Manjaro | forum.manjaro.org | Linux |
| EndeavourOS | forum.endeavouros.com | Linux |
| OpenSUSE | forums.opensuse.org | Linux |
| MikroTik | forum.mikrotik.com | Networking |
| Ubiquiti | community.ui.com | Networking |
Cloudflare/Blocked (need browser or FlareSolverr)
| Site | URL | Platform | Notes |
|---|---|---|---|
| Linux.do | linux.do | Discourse | 🔥 #1 AI abuse forum |
| NodeSeek | nodeseek.com | Discourse | VPS hosting |
| LowEndTalk | lowendtalk.com | Discourse | VPS |
| WebHostingTalk | webhostingtalk.com | Custom | Hosting |
| NamePros | namepros.com | Custom | Domains |
| XSS.is | xss.is | Discourse | Russian hacking |
| Lolz.live | lolz.live | Discourse | Russian marketplace |
| Zelenka.guru | zelenka.guru | Discourse | Russian marketplace |
| Cloudflare | community.cloudflare.com | Discourse | CDN/workers |
| Linode | forums.linode.com | Discourse | VPS |
Other Platforms (not Discourse)
| Site | URL | Platform | Notes |
|---|---|---|---|
| HostLoc | hostloc.com | Discuz! | Chinese VPS, AI proxies |
| 奶昔论坛 | cn.naixi.net | Discuz! | Chinese MJJ community |
| 大佬论坛 | dalao.net | Custom | Domains, VPS |
| 恩山无线 | right.com.cn | Discuz! | Routers, OpenWrt |
| LowEndSpirit | lowendspirit.com | Custom | VPS |
| 4PDA | 4pda.to | Custom | Russian mobile/software |
| Ru-Board | forum.ru-board.com | Custom | Russian IT/hacking |
| Leak.sx | leak.sx | Custom | Data leaks |
| RaidForums | raidforums.com | Custom | Data leaks |
| Lobsters | lobste.rs | Custom | Invite-only programming |
| Tildes | tildes.net | Custom | Invite-only tech |
Forum Discovery Source
- small-forums-list:
https://github.com/Amiyadesi/small-forums-list— curated list of 49+ niche forums. Online page:https://forums.cc.cd/. Categories: Tech/AI, VPS, Security, ACG, Hardware, Adult/Grey.