Joshua Moon the owner of Kiwifarms
It seems Kiwipedofarms is still down. Guess PedoJocelyn's paypig fags werent enough to keep his site going lmao.
I'm sorry to bring it to you but it's up.

1780130401764.png
 
So Josh likes DFC (delicious flat chest). 😂 These are from the same thread.
View attachment 113311View attachment 113312
It's interesting to see old posts from Josh like this. Because now, he would never say these things. Because Beauty Parlor wouldn't like it. He became a male feminist and he's more interested in self-censoring, pandering, and performing on stream, telling people what they want to hear.

Years later, he would denounce the MMORPG video game Tera as a pedophile game because one of the 7 races in this fantasy game is a race of girls that's called Elin. I would go clip it but I don't want to right now. So apparently he played and liked this game in the past but now it's for pedos, huh?
View attachment 113313
One thing I find hilarious is that Josh's litmus test for "Is this for pedophiles" is if it makes his own PP hard. Which is quite the self-own! Real recognizes real, I guess! It ties into his massive penchant for projection.
rape them.png
From the same thread:story:
 
Screenshot 2026-05-30 at 3.09.01 PM.png


I only look at that car wreck about once a week ... but watch the version numbers on tartarus "2026.05.29" "3eb8c27" etc to see when Jerksh broke it again.


and its up again. ever notice how there are "3000 people online" even after kiwi goes down for hours or even a whole day? fake numbers, bots with their online status hard coded , or these mother fuckers are addicted.

Screenshot 2026-05-30 at 3.16.50 PM.png
 
Reason: typo on version from screen shots
Last edited:
2026.05.30 - f0357a8

i bet the site "gets ddos ed again" next time this increments (meaning he fucked with it again)

Screenshot 2026-05-30 at 5.23.12 PM.png

Jerkshua just lost his xenforo license (again) that he had bought as "James Potter" to get around his ban and had been using to patch kiwi farms with new XF updates.

hes been lying the whole time about "coding" updates and security fixes for it by himself

the "licensed customer" flair is now gone.

6307b54f3be72b5b457cbe4ab89f28b33f841b557ac0507604184b692dc57a7c.pngd1da420528fc8d7dfb4400029d3544eb17f2459f78b98458f74f1c346bf44e71.jpgfb5f7fa92404bf432a8ae69cef52857d657d264d6365887ddbb6c7820c7008a2.jpg81c1100be44785a0186a9b30b38728d53fa63bb0e817813f12f2e51f29db8537.jpg

public service announcement: kiwifarms.cc (their fedi instance) will give "your ip address" and or physical location out. now youre all in on the joke, idgaf. (pro tip: im not in the united states, and dont care if onionnull confirms or denies that as long as he doesnt say exactly what city im in) but can confirm thats the ip address i used to post as alice lastname on their Fedi that day.

I think its even funnier given that all of this arose from a KF thread where Josh seethed about xenforo giving a customers info out without a warrant.

Screenshot 2026-05-30 at 5.38.57 PM.png

they do the exact same shit, although theyre usually not stupid enough to do so publicly.

so i dont even know what the point of this whole thread even was? :

Screenshot 2026-05-30 at 5.44.06 PM.png

Can confirm:

Screenshot 2026-05-30 at 5.47.21 PM.png

anyway i really dont care. getting them banned from xenforo updates again is so worth it.
 
Last edited:
thats his "way to patch it" and get zero day exploit warnings directly from xenforo that he didnt "want to say much more than that" about.

despite having a paid entitlement he apparently hasnt done so since 2025 (probably because this activity didnt involve eating) and the version he on right now is vulnerable to [at least] one exploit announced between march 6th and may 15 2026. the timing on this one is...


the timeline kind of works: mainstream vuln announcement dropped on may 15th. on monday may 18th nooly nool is lurking on their support forums , trolling XF and mocking a thread from it on KF... accidentally revealing his software and patch entitlement as James Potter in the process.

i dont know if thats whats happening to kiwifarms this week, but if it is, lol?

he has fucked with the XF software enough to remove the activation watermark and do some custom functions ... some of which are related to tartarus. he could have found himself in a situation where hes fucked with it enough that the xenforo provided patch failed to apply even if he had obtained it through support channels.

in which case i would totally expect him to lie about it and scapegoat a "tranny"

it would also mean everyone rushing to take "credit" for it is lying too.

pls no bully, pls no download
https://github.com/methosiea/xenforo-2-xss :(

for that to work, there would also have to be a hole in "tartarus" where someone can bypass it -- to use a script from a proof of concept and post directly to KF. perhaps *thats* what hes been scrambling to fix and repeatedly updated "tartarus" for almost a week now.

uhmm kengel you could (and probably should if youre going to stay on XF) probably make the same play and have someone else buy a XF license and download some patches manually for it, since you wouldnt be able to in the admin panel. xenforo posted a patch with a file named 2310-patch.zip for free on their support forum that can be applied even if you dont / cant upgrade

its in the attachments area here , i just bet josh tweaked his install enough it wouldnt apply.

unless anyone has a better explanation for why josh moon might have 1) been on xenforo support forums on may 18th and pissed off at them enough to mouth off at them and 2) sicc'ed all his kiwifarms flying monkeys on them in a featured thread.


https://xenforo.com/community/threads/xenforo-2-3-10-add-ons-and-2-2-19-released-includes-security-fix.236249/


Screenshot 2026-05-30 at 6.35.33 PM.png


https://kiwifarms.st/threads/xenforo-has-revoked-our-license.106654/


IMG_A.jpg
IMG_B.jpg
 
Last edited:
oh. just had a shower thought. i know what the hole in tartarus would be:

this line in the script (122):

curl -s -b "$COOKIE_FILE" -c "$COOKIE_FILE" -X POST \

you can populate that value by hand with a valid cookie instead of using a cookie jar (line 112)

just 1) use firefox normally, and pass the tartarus test

then turn on developer tools, right click any link, copy as CURL

Screenshot 2026-05-30 at 7.26.05 PM.png


and that gives you a "curl" command you can use to fix "xss.sh" , containing a "Cookie" line that gives you those variables for ttrs_clearance and xf_csrf

cookie ID and a csrf that will work in the script, ie:

curl 'https://kiwifarms.st/threads/xenfor...fo-without-a-court-order.246130/post-24588809' \
-H 'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:151.0) Gecko/20100101 Firefox/151.0' \
-H 'Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8' \
-H 'Accept-Language: en-US,en;q=0.9' \
-H 'Accept-Encoding: gzip, deflate, br, zstd' \
-H 'Sec-GPC: 1' \
-H 'Upgrade-Insecure-Requests: 1' \
-H 'Sec-Fetch-Dest: document' \
-H 'Sec-Fetch-Mode: navigate' \
-H 'Sec-Fetch-Site: same-origin' \
-H 'Sec-Fetch-User: ?1' \
-H 'Connection: keep-alive' \
-H 'Cookie: ttrs_clearance=ZZZZZZZZZZ; xf_csrf=zzzzzzzzzzzzz'


and now "tartarus" cant do shiiiiiiiit to stop automated posting or slow loris.
 
Last edited:
Tf is this and where's it from?
alogs.space /cow/ but dont go there it will make you an even worse human
its down several times a week, including at this moment

tldr: kiwis , onions, and "others" converge to take anonymous swipes at each other, skinwalk (impersonate) each other, gaslight, and accuse each other of being each other, or being from one of the other sites theyre banished from. <-- did i cover everything?

you might not know what they did to piss me off. but they do, and thats all that matters. its like Bill Cosby used to say: beat your kids every day, if you dont know what they did, they do!

since its down i cant post this helpful information over there in Jerkshua's thread (yet.)
 
Last edited:
Screenshot 2026-05-30 at 8.03.13 PM.png


"would you like to explore how to automate the session scraping process"

"here ill even help you structure the bash script"


Screenshot 2026-05-30 at 8.06.30 PM.png

oh NEAT, thanks Gemini - i dont need your help with that but thats so cool that anyone can do it with a little help from the new rolled out Google.com
 
Last edited:
View attachment 113340

I only look at that car wreck about once a week ... but watch the version numbers on tartarus "2026.05.29" "3eb8c27" etc to see when Jerksh broke it again.


and its up again. ever notice how there are "3000 people online" even after kiwi goes down for hours or even a whole day? fake numbers, bots with their online status hard coded , or these mother fuckers are addicted.

View attachment 113342
If what you're saying is true then this just validates my belief that Jersh is no different from Nick Fuentes.

If you know anything about Nick Fuentes, before he would settle down on Rumble (where most of Nick Fuentes' fans now go to just to watch him) and eventually coming back on Twitter (after Elon Musk unbanned him) he used to stream on Cozy TV (now known as America First Plus after a rebrand) which is a failed Alt-tech project where Nick Fuentes could stream openly about his belief system and sold it as a "free speech platform" (and by free speech I mean as long as you agreed with Nick Fuentes on Cozy TV).

Some of Nick Fuentes' former associates eventually came out and stated publicly that behind the scenes, Nick Fuentes did got some strong viewership at first but over time people began to lose interest. So Nick Fuentes decided to bot his own viewership on Cozy TV to give the impression that he was still relevant despite the cold reality that people were tuning out of Cozy TV.

The thing with Nick Fuentes using bot farms to prop himself up still hasn't really ended to this day (especially foreign bot farms). When Elon Musk updated Twitter to reveal the country locations of users, a good chunk of the groypers got exposed as jeets and towelheads and latin americans that were promoting the America First brand while not living in America in the first place and running bots to prop up Nick Fuentes and the Groyper movement on Twitter (because bot farms to create false engagement is still a problem on Twitter and on many online platforms to this day).

If what you're saying is true that Jersh is botting web traffic on Kiwi Farms then that shows me the farms is not in a good state of health as Jersh wants people to think. Whether it's Nick Fuentes botting his viewership for his video content or Jersh botting web traffic to give the impression that Kiwi Farms is still relevant, a grifter is going to grift.
2026.05.30 - f0357a8

i bet the site "gets ddos ed again" next time this increments (meaning he fucked with it again)

View attachment 113360

Jerkshua just lost his xenforo license (again) that he had bought as "James Potter" to get around his ban and had been using to patch kiwi farms with new XF updates.

hes been lying the whole time about "coding" updates and security fixes for it by himself

the "licensed customer" flair is now gone.

View attachment 113362View attachment 113363View attachment 113364View attachment 113361

public service announcement: kiwifarms.cc (their fedi instance) will give "your ip address" and or physical location out. now youre all in on the joke, idgaf. (pro tip: im not in the united states, and dont care if onionnull confirms or denies that as long as he doesnt say exactly what city im in) but can confirm thats the ip address i used to post as alice lastname on their Fedi that day.

I think its even funnier given that all of this arose from a KF thread where Josh seethed about xenforo giving a customers info out without a warrant.

View attachment 113365

they do the exact same shit, although theyre usually not stupid enough to do so publicly.

so i dont even know what the point of this whole thread even was? :

View attachment 113366

Can confirm:

View attachment 113367

anyway i really dont care. getting them banned from xenforo updates again is so worth it.
So this just confirms that Jersh has always been a script kiddie and he isn't this talanted coder like he claims to be.

He couldn't even find some script on Github or Stack Overflow and he had to resort to ban evasion just to get new updates for Kiwi Farms.

Anyone that still claims that Jersh is some talented computer super genius, this should remind everyone that Jersh cannot write 'Hello World' in any computer language for jack shit and has to rely on the work of others like the talentless script kiddie that he is. I'll admit I'm not the best coder ever either but at least I can still write 'Hello World' and show that I can.
 
Last edited:
mods are asleep and they just fucked trombonista over after 20 years of service so i guess Slungus22 is having some fun with this information:

https://kiwifarms.st/threads/slungu...is-site-anymore.225059/page-377#post-24624116

Screenshot 2026-05-31 at 1.36.54 AM.png

then this just goes on and on ... i think you get the idea, not sure if its actual bot posting but if it is, then yeah, tartarus fail. imagine someone with actual talent and an actual resentment --not just vibecoded slop here. at least for automated posting. hey whatever gets the job done i guess.

he might finally eat a ban but i have great news you dont even need a kf account to make , um, a certain, um, volume of, um, distributed requests with this information. i really dont care what someone does with it. i know what id do with it if i was exceptionally pissed off, but if you want to frog post? frog post. shine on you crazy mother fucker.

nothing against "elaine" but i didnt want to be like "tee hee, kiwi farms has a vulnerability but im not telling nyah nah nyah nah" and then be all coy and vague about it. im like here you go, kids , have a good time.


Screenshot 2026-05-31 at 1.36.48 AM.pngScreenshot 2026-05-31 at 1.38.35 AM.png
Screenshot 2026-05-31 at 1.38.58 AM.pngScreenshot 2026-05-31 at 1.39.34 AM.png

and then idk, whats a kiwi farms? not gonna confirm or deny anything other than, they keep "phonebooking" information about me that is not, in fact, public information and im just going to keep fucking with them for that until one of us dies or josh scrubs any and all such info. no, im not going to confirm anything or send him a sad little email for him to sadistically mock and post in that thread.

Screenshot 2026-05-31 at 1.57.32 AM.png


perhaps jerkshua woke up on the wrong side of the litter box and used me as a punching bag and banned me for absolutely no fucking reason one day, and maybe people dont like getting cut off from their "friends" so im still entertaining myself with the farms in some way or another.

also that fat grifting tub of shit cashed my $20 t&h check and didnt credit me shiiiiiit. enjoy my pound of flesh , nigger.
 
Last edited:

Online statistics

Members online
3
Guests online
737
Total visitors
740

Visitor Heatmap

Back
Top Bottom