web

CatBank

创建两个账号，test1和test2，第一个想第二个转账1000000，然后第二个在转给M猫，得到flag

猫猫的秘密

<script>
       let token = '';
       
       document.getElementById('loginBtn').addEventListener('click', async () => {
           const username = document.getElementById('username').value;
           const password = document.getElementById('password').value;
           
           try {
               const response = await fetch('/login', {
                   method: 'POST',
                   headers: {
                       'Content-Type': 'application/json'
                   },
                   body: JSON.stringify({ username, password })
               });
               
               const data = await response.json();
               
               if (response.ok) {
                   token = data.token;
                   document.getElementById('loginResult').textContent = `登录成功: ${data.message}`;
                   document.getElementById('loginResult').classList.remove('hidden');
                   document.getElementById('loginSection').classList.add('hidden');
                   document.getElementById('secretSection').classList.remove('hidden');
               } else {
                   document.getElementById('loginResult').textContent = `错误: ${data.error}`;
                   document.getElementById('loginResult').classList.remove('hidden');
               }
           } catch (error) {
               document.getElementById('loginResult').textContent = `发生错误: ${error.message}`;
               document.getElementById('loginResult').classList.remove('hidden');
           }
       });
       
       document.getElementById('getSecretBtn').addEventListener('click', async () => {
           try {
               const response = await fetch('/get_secret', {
                   method: 'GET',
                   headers: {
                       'Authorization': token
                   }
               });
               
               const data = await response.json();
               
               if (response.ok) {
                   let resultText = `${data.message}\n\n`;
                   
                   if (data.public) {
                       resultText += `${data.public}\n\n`;
                   }
                   
                   if (data.confidential) {
                       resultText += `猫猫信息: ${data.confidential}\n\n`;
                   }
                   
                   if (data.flag) {
                       resultText += `Flag: ${data.flag}`;
                   }
                   
                   document.getElementById('secretResult').textContent = resultText;
               } else {
                   document.getElementById('secretResult').textContent = `错误: ${data.error}`;
               }
               
               document.getElementById('secretResult').classList.remove('hidden');
           } catch (error) {
               document.getElementById('secretResult').textContent = `发生错误: ${error.message}`;
               document.getElementById('secretResult').classList.remove('hidden');
           }
       });
       
       document.getElementById('logoutBtn').addEventListener('click', () => {
           token = '';
           document.getElementById('username').value = '';
           document.getElementById('password').value = '';
           document.getElementById('loginResult').classList.add('hidden');
           document.getElementById('secretResult').classList.add('hidden');
           document.getElementById('secretSection').classList.add('hidden');
           document.getElementById('loginSection').classList.remove('hidden');
       });
   </script>