Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
Sichere ProgrammierungRefreshed repository pull requests page generally available(22.09.2026 um 03:25 Uhr)
Sichere ProgrammierungThe Joy of Learning the Basics Again(22.09.2026 um 03:28 Uhr)
Sichere ProgrammierungZero-Code OpenTelemetry Tracing for Dagster(22.09.2026 um 03:39 Uhr)
Linux Tipps & Hardening`prime-all`(22.09.2026 um 02:28 Uhr)
IT Security Toolsopensoho v0.15.2(22.09.2026 um 03:33 Uhr)
IT Security NachrichtenUS Proposes AI Incident Alert System in Talks With China, Bessent Says(22.09.2026 um 04:01 Uhr)
Sichere ProgrammierungRefreshed repository pull requests page generally available(22.09.2026 um 03:25 Uhr)
Sichere ProgrammierungThe Joy of Learning the Basics Again(22.09.2026 um 03:28 Uhr)
Sichere ProgrammierungZero-Code OpenTelemetry Tracing for Dagster(22.09.2026 um 03:39 Uhr)
Linux Tipps & Hardening`prime-all`(22.09.2026 um 02:28 Uhr)
IT Security Toolsopensoho v0.15.2(22.09.2026 um 03:33 Uhr)
IT Security NachrichtenUS Proposes AI Incident Alert System in Talks With China, Bessent Says(22.09.2026 um 04:01 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

I Reverse-Engineered Claude Code's /buddy System and Got a Legendary Cat — Here's How to Reroll Yours

Claude Code recently shipped /buddy — a companion that lives in your terminal and reacts to your code. You get one companion, seeded from your identity. No rerolls. No trades. I got an Epic Cactus named "Thornquake". I wanted a Legendary C…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

Claude Code recently shipped /buddy — a companion that lives in your terminal and reacts to your code. You get one companion, seeded from your identity. No rerolls. No trades.



I got an Epic Cactus named "Thornquake". I wanted a Legendary Cat. So I dug into the source code, figured out exactly how it works, and got my Legendary Cat.



Before and After






The Algorithm



Your buddy is 100% deterministic. Same identity = same buddy, every single time. There's no RNG at hatch time. Here's what happens under the hood:




identity + "friend-2026-401" → FNV-1a hash → Mulberry32 PRNG seed






The PRNG is then consumed in order:





  1. Rarity — weighted roll (common 60%, uncommon 25%, rare 10%, epic 4%, legendary 1%)


  2. Species — uniform pick from 18 options (duck, cat, dragon, axolotl, chonk, etc.)


  3. Eye style, hat, shiny (1% chance), stats (DEBUGGING, PATIENCE, CHAOS, WISDOM, SNARK)



The identity that seeds everything comes from:




oauthAccount?.accountUuid ?? userID ?? "anon"






This one line is where most people get stuck.






The Trap: accountUuid Overrides userID



A script floating around tells you to brute-force a userID and write it to ~/.claude.json. I tried it. Got a perfect Legendary Cat ID. Set it. Restarted. Got... the same Epic Cactus.



Why? If you're on a Team or Pro plan, you have an oauthAccount.accountUuid in your config. It takes priority over userID. The buddy system never even looks at userID.






The Fix



Delete only the accountUuid field from oauthAccount. Keep everything else:




{
"oauthAccount": {
"emailAddress": "[email protected]",
"organizationName": "Your Team Plan"
},
"userID": "your-brute-forced-legendary-id"
}






The nullish coalescing (??) falls through to userID. Team Plan still works because auth uses OAuth tokens, not the UUID.



Then delete the companion field from the config (forces a fresh hatch), restart Claude Code, and run /buddy.






What's Stored vs. What's Regenerated



This surprised me the most. The config only stores:





  • name (AI-generated at hatch)


  • personality (AI-generated at hatch)


  • hatchedAt (timestamp)



Everything else — rarity, species, eye, hat, shiny, stats — is regenerated from your identity hash on every read. The source code comment says:




"Bones are regenerated from hash(userId) on every read so species renames don't break stored companions and users can't edit their way to a legendary."




This means:





  • No evolution. No XP, no leveling, no progression


  • Stats are fixed. Deterministic from your identity


  • You can't just edit the rarity in the config. It gets overwritten on the next read


  • But you can control which identity seeds the generation. That's the exploit






The One Caveat



If Anthropic forces a re-login (token expiry, update), the server writes back your real accountUuid. Your buddy reverts. Just delete accountUuid again and re-hatch — same userID = same legendary buddy comes back (new AI-generated name, but same species and rarity).






Scripts



I put together a repo with everything you need:



ithiria894/claude-code-buddy-reroll





  • reroll.js — brute-force for any target species + rarity


  • verify.js — check what buddy any ID produces (or auto-read your config)


  • fix.sh — one-command recovery after a forced re-login




# Find a legendary dragon
node reroll.js dragon 2000000

# Check what your current config produces
node verify.js auto

# Fix after re-login
bash fix.sh






Happy rerolling. 🎲

Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten I Reverse-Engineered Claude Code's /buddy System and Got a Legendary Cat — Here's How to Reroll Yours

Thematisch verwandte Begriffe: ReverseEngineered, Claude, Codes, buddy · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-49449 | Joplin is an open source note-taking and to-do application that organise…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick