厦门大学图床接口
<i class="pstatus"> 本帖最后由 Typeboom 于 2024-12-29 23:07 编辑 </i><br /><br />
<font size="6"><font color="Red">别看了别看了，半天不到就删图<br />
</font></font><br />
<img id="aimg_ZsiLW" onclick="zoom(this, this.src, 0, 0, 0)" class="zoom" src="https://lib.xmu.edu.cn/ask/sites/default/files/dbq/51168771-51f0-4553-bdbd-5afe1467b642.png" onmouseover="img_onmouseoverfunc(this)" onload="thumbImg(this)" border="0" alt="" /><br />
<br />
<br />
<br />
<img src="https://hostloc.com/static/image/smiley/default/lol.gif" smilieid="12" border="0" alt="" /> <br /><div class="blockcode"><div id="code_M0M"><ol><li>try {<br /><li>if (img.size > 10 * 1024 * 1024) {<br /><li>throw new Error<br /><li>}<br /><li><br /><li>let ticket = await utils.fetchWithTimeout(`https://lib.xmu.edu.cn/ask/problem_report?db_name=RESSET%E6%95%B0%E6%8D%AE%E5%BA%93%E7%B3%BB%E5%88%97`).then(r => r.text());<br /><li>ticket = ticket.split('\n');<br /><li>ticket = JSON.parse(ticket.match(/jQuery\.extend\(Drupal\.settings,\s*({.+?})\);/s));<br /><li><br /><li>const formID = `form-${ticket.ajax['edit-field-dbq-img-und-0-upload-button'].url.split('form-')}`<br /><li><br /><li>let form = new FormData();<br /><li>form.append(`form_build_id`, formID);<br /><li>form.append(`form_id`, `services_db_report_form`);<br /><li>form.append(`field_dbq_db_title`, `RESSET数据库系列`);<br /><li>form.append('files', fsc.createReadStream(img.path), img.name);<br /><li>form.append(`ajax_page_state`, ticket.ajaxPageState.theme_token);<br /><li><br /><li>let upload = await utils.fetchWithTimeout(`https://lib.xmu.edu.cn/ask/zh-hans/file/ajax/field_dbq_img/und/${formID}`, {<br /><li>method: 'POST',<br /><li>body: form<br /><li>}, 10 * 1000).then(r => r.text());<br /><li><br /><li>upload = upload.replace(/\\u([\d\w]{4})/gi, (match, grp) => {<br /><li>return String.fromCharCode(parseInt(grp, 16));<br /><li>});<br /><li>upload = decodeURIComponent(upload);<br /><li><br /><li>const matches = upload.match(/https:\\\/\\\/lib\.xmu\.edu\.cn\\\/ask\\\/sites\\\/default\\\/files\\\/dbq\\\/+\.(png|gif|jpg|jpeg)/g);<br /><li>if (!matches) {<br /><li>throw new Error<br /><li>}<br /><li><br /><li>console.log(matches.replace(/\\/g, ''))<br /><li>} catch (error) {<br /><li>console.log(error)<br /><li>}</ol></div><em onclick="copycode($('code_M0M'));">复制代码</em></div> <div class="quote"><blockquote><font size="2"><a href="https://hostloc.com/forum.php?mod=redirect&goto=findpost&pid=16155966&ptid=1378524" target="_blank"><font color="#999999">Typeboom 发表于 2024-12-29 20:11</font></a></font><br />
能的话还得了？</blockquote></div><br />
<a href="https://hostloc.com/thread-1378397-1-1.html" target="_blank">https://hostloc.com/thread-1378397-1-1.html</a> 我找到的洞可以<br />
等CVE发出来再发loc 不然被mjj抢了 6，啥都能找出来 <img src="https://hostloc.com/static/image/smiley/default/lol.gif" smilieid="12" border="0" alt="" /> 很可刑 卧槽，把人家反馈的图片上传都扒出来了 有点慢，服务器带宽不够给力 牛~ 不能上传网页 没意思 <div class="quote"><blockquote><font size="2"><a href="https://hostloc.com/forum.php?mod=redirect&goto=findpost&pid=16155826&ptid=1378524" target="_blank"><font color="#999999">MasterCard 发表于 2024-12-29 18:23</font></a></font><br />
不能上传网页 没意思</blockquote></div><br />
能的话还得了？<img src="https://hostloc.com/static/image/smiley/default/lol.gif" smilieid="12" border="0" alt="" />
页:
[1]
2