Any reason for an NPC to be unconscious if magic healing is available

Being a DM here. Tring to set up a plot which involves an NPC being unconscious after a big fight so that he missed some important event (and only just awoke before PC arrives).

However, it is Pathfinder where magic healing is available. Unconscious due to loss of HP can easily be fixed by CLW from level 1 cleric (as long as he is not killed immediately). Even the unconscious caused by loss of CON can be fixed by Restoration (which does not need a very high-level cleric), not to mention that CON damage only commonly exists when dealing with undead/poison (which is not the case for the fight I planned).

Is there a better reason for this high-rank NPC to stay unconscious or at least disabled for some time if most of the low-level healing spells are available indefinitely? This is mostly a plot device but I just want it to make sense within game mechanics instead of just saying “he is just so unconscious that magic healing is not helping”.

Handlebars.js 4.1.1 Server Side Template Injection exploitation – running system commands with a Node.js RCE when require() is not available?

I’m currently reading the following article and trying to exploit the vulnerability (Handlebars.js 4.1.1 Server Side Template Injection):

Sure enough, the proof of concept code works fine. Specifically, the final snippet from Matias works in my setup. However, after all those context changes, I no longer have access to the require keyword, and therefore I cannot do require('child_process').exec(), because it says require is not defined.

I tried looking for global variables in the current context which might help me, but found nothing.

I also considered copying the whole child_process library’s source code into my payload, but that’s not trivial, since the library uses other libraries and some specific variables, which are not initialized for me (primordials, for example).

In order to continue the assignment, I need to get a reverse shell on the target machine. How can I use the RCE to run system commands/get a reverse shell if I cannot use require()?

Publicly Available PCAP dumps that associate IP addresses with Operating System?

I am currently working on a machine learning module to detect Operating Systems based on existing packet traffic in pcap file format. So far, I have generated some traffic of popular Operating Systems available. However, this process is very tedious.

I would like to know if there is any publicly available pcap files that associates data generated from a particular Operating System (e.g. pcap file that have a lot of traffic from Windows XP). I am aware that there are other similar questions asked regarding publicly available pcap files, however none of them seem to be focused on Operating Systems.

Thank you.

Can a sorcerer cast the same spell twice if enough spell slots are available?

In D&D 5e, let’s say that I have two level-1 spell slots available and want to cast Burning Hands. On one turn, I use one of the available spell slots to cast Burning Hands. On my next turn, I have one additional spell slot available. Am I allowed to use it for Burning Hands, or do I need to select a different spell to use the remaining spell slot?

I am asking this because I was told by someone more experienced that it doesn’t work that way, but I thought the rules said otherwise.

What spells are available to find where an object came from?

Ichabod the Inscrutable is a powerful Wizard, and has found an unmarked, adamantine ingot. He would like to locate where it came from or where it was mined at. He has access to all non-UA, published Wizard spells, but doesn’t want to use a Wish. Additionally, his philanthropic endeavors have made him well liked at all the local temples, so he can reliably access any Cleric spell.

He’s already tried Locate Object, but the range on the spell was FAR too short for a location that could easily be half a continent away.

What are the spells, other than Wish, that can help him find where this ingot came from?

What options are available to a Portable Hole owner?

I am a new DM, trying to understand the magic of the Portable Hole. I’ve read through as many previous posts on Portable Hole shenanigans as I could, but none seem to answer my questions. One of my players has managed to find a Portable Hole, thanks to the random loot tables. He’s familiar with them due to having played earlier versions of D&D. I, having never played these versions, am not as familiar. We find ourselves at odds on just how this item works. In order to keep this post short, I won’t post my interpretation of the rules, though suffice to say I disagree with the following.

  1. The Portable Hole can be opened by two people, holding it open like a sheet.

  2. If even the smallest portion of the cloth is opened, the portal is opened and the character can reach into the extra dimensional space.

  3. The Portable Hole can be thrown upwards, and unfold on its way back down, therefore opening the portal.

Do the rules shed any light on these complicated questions?

Is there more information on the spell Galder’s Tower available from previous editions?

I’m playing 5e, and planning my 3rd level spell acquisitions. I came across the spell Galder’s Tower. The spell description says:

You conjure a two-story tower made of stone, wood, or similar suitably sturdy materials.

It then goes on to describe a few more of the tower’s details such as how rooms are furnished and what happens when you upcast the spell. I’m wondering if this is a ‘new to 5e’ spell, and if it isn’t

Is there more information on the spell Galder’s Tower available from previous editions?

What are the available D&D 5e backgrounds, and where can I find them?

Similar to the possible races, official classes, and 4e backgrounds questions, what are official WotC-published backgrounds available for players, and which books/resources contain them?

By official, I mean that the backgrounds are available for Adventurers League Play. While other backgrounds from Unearthed Arcana or from other WotC sources outside the D&D team are of interest, please mention whether they’re considered official and sanctioned or not.

How to guide my players into realizing they have multiple options available for an encounter?

For my next session with my PCs, I’m planning to have them witness an attack on an NPC that’s intended to hook them the adventure. The plan is for the party to encounter his daughter, who also has a target painted on her back. I want the players to be making choices throughout the adventure, whether to fight back during an encounter, or to hide, or to flee.

These players are new to RPGs, so I want make sure that they realize that attacking isn’t their only option. So far all we have run is a run of the mill dungeon run.

The initial encounter should guide the player’s expectations. I don’t want trying to rescue the man to seem like the only option but I don’t want it to seem like it’s not an option. How do I help my players realize that they have more than a single option available to them?