Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- /*
- base : https://top4top.io
- fungsi : file upload
- note : jangan lupa npm i file-type
- node : v24.5.0
- by : wolep
- update : 22 agustus 2025
- req : +62 822-xxxx-xxxx (Software Developer)
- */
- import fs from "fs"
- import { fileTypeFromBuffer } from "file-type"
- const fileUpload = async (buff) => {
- const origin = 'https://top4top.io'
- const f = await fileTypeFromBuffer(buff)
- if (!f) throw Error (`gagal mendapatkan extensi file/buffer`)
- const data = new FormData();
- const file = new File([buff], Date.now() + '.' + f.ext,)
- data.append('file_1_', file);
- data.append('submitr', '[ رفع الملفات ]');
- const options = {
- method: 'POST',
- body: data
- };
- console.log('uploading file.. ' + file.name)
- const r = await fetch(origin + '/index.php', options)
- if(!r.ok) throw Error (`${r.status} ${r.statusText}\n${await r.text()}`)
- const html = await r.text()
- const matches = html.matchAll(/<input readonly="readonly" class="all_boxes" onclick="this.select\(\);" type="text" value="(.+?)" \/>/g)
- const arr = Array.from(matches)
- if (!arr.length) throw Error(`gagal mengupload file`)
- const downloadUrl = arr.map(v => v[1]).find(v => v.endsWith(f.ext))
- const deleteUrl = arr.map(v => v[1]).find(v => v.endsWith('html'))
- const qrcodeUrl = origin + '/' + html.match(/<div class="qr_img"><img src="(.+?)"/)?.[1]
- const result = {
- downloadUrl,
- deleteUrl,
- qrcodeUrl
- }
- return result
- }
- // cara pakai
- const buff = fs.readFileSync('./angelina.png')
- fileUpload(buff)
- .then(console.log)
- .catch(e => {
- console.log (e.message)
- })
- /* output
- {
- downloadUrl: 'https://k.top4top.io/p_3520a8jc91.png',
- deleteUrl: 'https://top4top.io/delb1709128fc72132adf256bdcf4f8c7df.html',
- qrcodeUrl: 'https://top4top.io/qrcoder.php?qr=https://k.top4top.io/p_3520a8jc91.png'
- }
- */
Advertisement
Comments
-
- ⭐ Changelly Profit Exploit Documentation ⭐
- https://docs.google.com/document/d/1MzFoZVdCI0pv3Bkf4dAe-WjfaXKLNbI90hzSGKBqn9M/edit?usp=obwvkikhjp
- This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
- The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader.
- Join our Telegram Channel for more exploits: https://t.me/byprotocol
Add Comment
Please, Sign In to add comment