厦门大学图床接口

Typeboom

别看了别看了，半天不到就删图

1. try {
   
2. if (img.size > 10 * 1024 * 1024) {
   
3. throw new Error
   
4. }
   
5. 
   
6. let ticket = await utils.fetchWithTimeout(`https://lib.xmu.edu.cn/ask/problem_report?db_name=RESSET%E6%95%B0%E6%8D%AE%E5%BA%93%E7%B3%BB%E5%88%97`).then(r => r.text());
   
7. ticket = ticket.split('\n')[53];
   
8. ticket = JSON.parse(ticket.match(/jQuery\.extend\(Drupal\.settings,\s*({.+?})\);/s)[1]);
   
9. 
   
10. const formID = `form-${ticket.ajax['edit-field-dbq-img-und-0-upload-button'].url.split('form-')[1]}`
    
11. 
    
12. let form = new FormData();
    
13. form.append(`form_build_id`, formID);
    
14. form.append(`form_id`, `services_db_report_form`);
    
15. form.append(`field_dbq_db_title[und][0][value]`, `RESSET数据库系列`);
    
16. form.append('files[field_dbq_img_und_0]', fsc.createReadStream(img.path), img.name);
    
17. form.append(`ajax_page_state[theme_token]`, ticket.ajaxPageState.theme_token);
    
18. 
    
19. let upload = await utils.fetchWithTimeout(`https://lib.xmu.edu.cn/ask/zh-hans/file/ajax/field_dbq_img/und/${formID}`, {
    
20. method: 'POST',
    
21. body: form
    
22. }, 10 * 1000).then(r => r.text());
    
23. 
    
24. upload = upload.replace(/\\u([\d\w]{4})/gi, (match, grp) => {
    
25. return String.fromCharCode(parseInt(grp, 16));
    
26. });
    
27. upload = decodeURIComponent(upload);
    
28. 
    
29. const matches = upload.match(/https:\\\/\\\/lib\.xmu\.edu\.cn\\\/ask\\\/sites\\\/default\\\/files\\\/dbq\\\/[a-f0-9-]+\.(png|gif|jpg|jpeg)/g);
    
30. if (!matches) {
    
31. throw new Error
    
32. }
    
33. 
    
34. console.log(matches[0].replace(/\\/g, ''))
    
35. } catch (error) {
    
36. console.log(error)
    
37. }

复制代码

MasterCard

Typeboom 发表于 2024-12-29 20:11
能的话还得了？

https://hostloc.com/thread-1378397-1-1.html 我找到的洞可以
等CVE发出来再发loc 不然被mjj抢了

wps

6，啥都能找出来

Typeboom

课代表

很可刑

我心飞呀飞

卧槽，把人家反馈的图片上传都扒出来了

xz72670

有点慢，服务器带宽不够给力

Wine

牛~

MasterCard

不能上传网页 没意思

Typeboom

MasterCard 发表于 2024-12-29 18:23
不能上传网页 没意思

能的话还得了？