brownie-in-motion

const response = `
globalThis.proxy = (url, opts) => (
    fetch('https://moo.flag.sh/json?url=' + encodeURIComponent(url), {
        method: 'POST',
        body: JSON.stringify(opts ?? {}),
    }).then((res) => res.json())
)
`

export default {

brownie-in-motion

Postviewer

The rumor tells that adm1n stores their secret split into multiple documents. Can you catch 'em all?

We are provided with a single attachment explaining the /bot endpoint and a link to the challenge.

First Step

brownie-in-motion

-- Logs begin at Fri 2020-02-28 02:45:55 PST, end at Mon 2020-06-15 17:16:54 PDT. --
Jun 15 17:10:18 daniel systemd-journald[309]: Journal stopped
Jun 15 17:10:18 daniel systemd-shutdown[1]: Sending SIGTERM to remaining processes...
Jun 15 17:10:18 daniel systemd-shutdown[1]: Syncing filesystems and block devices.
Jun 15 17:10:18 daniel audit: BPF prog-id=13 op=UNLOAD
Jun 15 17:10:18 daniel audit: BPF prog-id=14 op=UNLOAD
Jun 15 17:10:18 daniel audit: BPF prog-id=11 op=UNLOAD
Jun 15 17:10:18 daniel audit: BPF prog-id=12 op=UNLOAD
Jun 15 17:10:18 daniel systemd[1]: Shutting down.
Jun 15 17:10:18 daniel systemd[1]: Reached target Power-Off.

brownie-in-motion

-- Logs begin at Fri 2020-02-28 02:45:55 PST, end at Mon 2020-06-15 15:38:58 PDT. --
Jun 15 15:34:53 daniel systemd-journald[309]: Journal stopped
Jun 15 15:34:53 daniel systemd-shutdown[1]: Sending SIGTERM to remaining processes...
Jun 15 15:34:53 daniel systemd-shutdown[1]: Syncing filesystems and block devices.
Jun 15 15:34:53 daniel audit: BPF prog-id=13 op=UNLOAD
Jun 15 15:34:53 daniel audit: BPF prog-id=14 op=UNLOAD
Jun 15 15:34:53 daniel audit: BPF prog-id=11 op=UNLOAD
Jun 15 15:34:53 daniel audit: BPF prog-id=12 op=UNLOAD
Jun 15 15:34:53 daniel systemd[1]: Shutting down.
Jun 15 15:34:53 daniel systemd[1]: Reached target Power-Off.

brownie-in-motion

-- Logs begin at Thu 2020-02-27 00:04:18 PST, end at Mon 2020-06-15 14:11:31 PDT. --
Jun 15 13:55:06 daniel systemd-journald[311]: Journal stopped
Jun 15 13:55:06 daniel systemd-shutdown[1]: Sending SIGTERM to remaining processes...
Jun 15 13:55:06 daniel systemd-shutdown[1]: Syncing filesystems and block devices.
Jun 15 13:55:06 daniel audit: BPF prog-id=11 op=UNLOAD
Jun 15 13:55:06 daniel audit: BPF prog-id=12 op=UNLOAD
Jun 15 13:55:06 daniel audit: BPF prog-id=13 op=UNLOAD
Jun 15 13:55:06 daniel audit: BPF prog-id=14 op=UNLOAD
Jun 15 13:55:06 daniel systemd[1]: Shutting down.
Jun 15 13:55:06 daniel systemd[1]: Reached target Power-Off.

brownie-in-motion

-- Logs begin at Thu 2020-02-27 00:04:18 PST, end at Mon 2020-06-15 14:00:22 PDT. --
Jun 15 13:55:51 archiso kernel: Linux version 5.4.6-arch3-1 (linux@archlinux) (gcc version 9.2.0 (GCC)) #1 SMP PREEMPT Tue, 24 Dec 2019 04:36:53 +0000
Jun 15 13:55:51 archiso kernel: Command line: initrd=\EFI\archiso\intel_ucode.img initrd=\EFI\archiso\amd_ucode.img initrd=\EFI\archiso\archiso.img archisobasedir=arch archisolabel=ARCH_202001
Jun 15 13:55:51 archiso kernel: KERNEL supported cpus:
Jun 15 13:55:51 archiso kernel:   Intel GenuineIntel
Jun 15 13:55:51 archiso kernel:   AMD AuthenticAMD
Jun 15 13:55:51 archiso kernel:   Hygon HygonGenuine
Jun 15 13:55:51 archiso kernel:   Centaur CentaurHauls
Jun 15 13:55:51 archiso kernel:   zhaoxin   Shanghai  
Jun 15 13:55:51 archiso kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers'