| (function(d) { | |
| 'use strict'; | |
| // DOM elements. | |
| var body = d.body; | |
| var html = d.documentElement; | |
| var head = d.head || d.getElementsByTagName('head')[0]; | |
| // Style attributes. | |
| var b = body.style; |
| #include <WinAPI.au3> | |
| #include <WindowsConstants.au3> | |
| Opt("WinTitleMatchMode", 2) | |
| Local $hCompDC = _WinAPI_CreateCompatibleDC(0) | |
| Local $tBMI = DllStructCreate($tagBITMAPINFO) | |
| DllStructSetData($tBMI, 1, DllStructGetSize($tBMI) - 4) ; size of struct | |
| DllStructSetData($tBMI, 2, 400) ; width | |
| DllStructSetData($tBMI, 3, 400) ; height |
| javascript:var thing=function(){var e=parseInt(document.getElementById("ID-overviewCounterValue").innerText);[].slice.call(document.querySelectorAll("link[type='image/x-icon']")).forEach(function(e){e.parentNode.removeChild(e)});var t=document.createElement("canvas");t.width=16;t.height=16;var n=t.getContext("2d");var r=function(){n.font="bold 10px sans-serif";n.fillText(e,e>9?2:4,12);var r=document.createElement("link");r.type="image/x-icon";r.rel="shortcut icon";r.href=t.toDataURL("image/x-icon");document.getElementsByTagName("head")[0].appendChild(r)};r()};setInterval(thing,1e3) |
| GoogleDomainsMgr |
| #!/usr/bin/ruby | |
| class IPGenerator | |
| public | |
| def initialize(session_count, session_length) | |
| @session_count = session_count | |
| @session_length = session_length | |
| @sessions = {} | |
| end |
| /* | |
| * module.js - The description of the module. | |
| */ | |
| var Module = (function () { | |
| // Properties | |
| /////////////////////////// | |
| var x = 0; |
| —– BEGIN LICENSE —– | |
| K-20 | |
| Single User License | |
| EA7E-940129 | |
| 3A099EC1C0B5C7C5 33EBF0CF BE82FE3B |
| //replace http://agar.io/main_out.js by this file | |
| //with Fiddler Web Debugger (AutoResponder tab) | |
| //bots can be created in different rooms - so try restart the page if need | |
| var totalBotCount = 0; | |
| function game(h, r, bot, botUrl, botName) { |
| <script> | |
| // Break out of an iframe, if someone shoves your site | |
| // into one of those silly top-bar URL shortener things. | |
| // | |
| // Passing `this` and re-aliasing as `window` ensures | |
| // that the window object hasn't been overwritten. | |
| // | |
| // Example: | |
| // var window = 'haha, punked!'; |
The following attack will display a "you've been signed out" page for GMail, and attempt to steal your account credentials.
DO NOT PUT ANY ACCOUNT CREDENTIALS INTO ANY TABS CREATED AFTER VISITING THESE LINKS :)
I received an email in my GMail inbox with a fake attachment image, styled to look like the real GMail attachment UI:
This linked to a page that ended up displaying a fake "you've been signed out" link, via the data:text/html... URL feature of Chrome:
